wayfinder
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from an issue tracker, which serves as an ingestion point for potentially untrusted data.
- Ingestion points: Reads issue titles, bodies, and comments from the repository's issue tracker (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or guidance for the agent to treat ingested issue content as untrusted or to ignore embedded instructions.
- Capability inventory: The skill is capable of creating and closing issues, assigning developers, creating git branches for research findings, and invoking other skills through a subagent (SKILL.md).
- Sanitization: No sanitization or validation processes are mentioned for the content retrieved from the issue tracker prior to processing.
Audit Metadata