wayfinder
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, credential harvesting, or unauthorized remote code execution behaviors were detected. The skill is constrained to managing planning artifacts within an issue tracker.
- [PROMPT_INJECTION]: The skill defines a surface for Indirect Prompt Injection because it ingests untrusted data from an external source (issue tracker tickets and comments). However, this is inherent to its intended function as a planning tool and is considered safe within this context.
- Ingestion points: Issue tracker ticket bodies and comments described in SKILL.md.
- Boundary markers: None explicitly defined, though the workflow uses specific markdown templates for tickets.
- Capability inventory: Creation and modification of issue tracker tickets, and invocation of sub-skills for research and prototyping.
- Sanitization: No explicit sanitization or filtering of ingested ticket content is specified.
Audit Metadata