pathfinder-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an instructional guide for developers using Pathfinder MCP tools. It contains standard engineering workflows for debugging, implementing features, and refactoring without any malicious logic, exfiltration, or unauthorized access patterns.
- [PROMPT_INJECTION]: The skill facilitates the reading and processing of external codebases via tools like
read_source_fileandget_repo_map, which introduces a surface for indirect prompt injection if the files being analyzed contain malicious instructions designed to influence the agent. - Ingestion points: Code content is ingested through
read_symbol_scope,read_source_file,read_with_deep_context,search_codebase, andget_repo_mapas described in SKILL.md. - Boundary markers: No explicit boundary markers or 'ignore' instructions for code content are specified in the provided workflows.
- Capability inventory: The agent has the capability to execute shell commands via
Bash(e.g., for tests) and modify or delete files usingreplace_body,create_file, anddelete_filetools. - Sanitization: There is no mention of sanitization or filtering for the code being read before it enters the agent's context.
Audit Metadata