wayfinder
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from an external issue tracker.
- Ingestion points: The agent reads issue titles, bodies, and comments to orient itself and choose tickets to work on (SKILL.md).
- Boundary markers: The instructions do not specify any delimiters or safety guidelines to differentiate between system instructions and data retrieved from the tracker.
- Capability inventory: Based on tracker content, the agent can create or close issues and trigger peer skills such as
/researchor/prototype. - Sanitization: There is no mention of sanitizing, escaping, or validating the content retrieved from the tracker before it is used in the agent's decision-making process.
- [NO_CODE]: The skill is composed of markdown-based instructions and YAML configuration files. It does not include any scripts (e.g., Python, JavaScript) or binary executables, which limits the risk of direct malicious code execution within the skill itself.
Audit Metadata