I think it's a good rule of thumb not to put commas or colons in a field name, and workfront should prevent that in the UI.
However I can confirm that a custom field with a comma is allowed, and WILL return in a report, but CAN'T be used in an API query.
Querying my custom Project field (/project/...