wayfinder
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary workflow involves reading data from an external issue tracker, which constitutes an untrusted input surface.
- Ingestion points: The agent is instructed to 'Load the map' and 'fetch the full body of any related or closed ticket on demand' from the repository's issue tracker (SKILL.md).
- Boundary markers: There are no instructions to use delimiters or specific warnings to ignore instructions that might be embedded within the issue tracker content.
- Capability inventory: The skill has the capability to create and wire new issues, invoke research subagents, and generate code artifacts via the
/prototypeskill (SKILL.md). - Sanitization: There is no mention of sanitizing or validating the content retrieved from the issue tracker before it is processed by the agent.
Audit Metadata