wayfinder
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it is designed to ingest and process external codebase data which could contain malicious instructions.
- Ingestion points: The agent reads various repository files including routes, controllers, schemas, models, configs, and existing root documentation (SKILL.md).
- Boundary markers: The instructions do not include specific delimiters or boundary markers to distinguish codebase content from agent instructions.
- Capability inventory: The skill utilizes repository search, file reading, and file writing (wayfinder.md) to perform its task.
- Sanitization: No explicit sanitization or instruction-filtering mechanisms are described for the content ingested from the codebase.
Audit Metadata