wayfinder
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external issue tracker, including issue titles, bodies, and comments, which could contain malicious instructions designed to influence the agent's behavior during planning or resolution phases.\n
- Ingestion points: The agent fetches and reads the map issue and individual tickets from the tracker API as described in the 'Work through the map' section of SKILL.md.\n
- Boundary markers: The instructions do not define delimiters or warnings to separate the external issue content from the agent's system instructions, potentially allowing the agent to follow instructions found within issues.\n
- Capability inventory: The skill possesses capabilities to create and update issues, wire dependencies between them, post resolution comments, and create new git branches ('research/') in the repository environment.\n
- Sanitization: There is no evidence of content sanitization, escaping, or validation for the data retrieved from the issue tracker before it is processed by the agent.
Audit Metadata