skills/shipshitdev/skills/wayfinder/Gen Agent Trust Hub

wayfinder

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external GitHub issues and local tracker documentation, which could contain instructions intended to influence agent behavior.\n- Ingestion points: Reads from GitHub issue titles, bodies, and comments, as well as docs/agents/issue-tracker.md.\n- Boundary markers: Relies on markdown headers and structured sections for organization, but lacks explicit delimiters to isolate untrusted content.\n- Capability inventory: Includes the ability to create and modify GitHub issues (labels, child tickets, assignments, blocking links, resolution comments) and create temporary research branches.\n- Sanitization: Ingested content is not specifically sanitized or filtered before being used to update the project map.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 04:47 PM