wayfinder
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local script named frontier.py with a map ID argument to identify the current set of actionable tickets on the project map.
- [PROMPT_INJECTION]: The skill possesses a surface area for indirect prompt injection because it ingests and processes untrusted data from external sources and user input.
- Ingestion points: Data entering the context includes output from the /research sub-agent (API documentation and external knowledge) and loose project ideas from the user.
- Boundary markers: No specific delimiters or instructions are provided to the agent to treat external content as untrusted.
- Capability inventory: The agent is authorized to write to an issue ledger (creating and closing tickets) and execute the local utility script frontier.py.
- Sanitization: There is no evidence of data sanitization or validation of the content retrieved from external sources before it is incorporated into the planning process.
Audit Metadata