wayfinder
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructs the agent to read and process data from an external issue tracker (tickets and map issues). This represents a surface for indirect prompt injection where malicious instructions could be embedded in ticket content. However, this behavior is central to the skill's intended purpose of project coordination.
- Ingestion points: The agent loads the 'map' issue and the bodies of individual child tickets from the repository issue tracker (SKILL.md).
- Boundary markers: No explicit delimiters or boundary markers are instructed for the external content.
- Capability inventory: The skill allows the agent to create, modify, and close issues, post comments, and invoke other skills like /grilling and /prototype (SKILL.md).
- Sanitization: No specific sanitization or filtering of the ticket content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill mentions a setup command,
/setup-matt-pocock-skills, to configure the environment's issue tracker. This is a standard configuration step for the intended project environment.
Audit Metadata