sgds-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches typography pattern templates from the official GovTechSG GitHub repository (
raw.githubusercontent.com/GovTechSG/sgds-web-component). These are vendor-owned resources necessary for the skill's stated purpose of providing UI patterns. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch external JavaScript files and extract HTML template literals for implementation. This creates a surface for indirect prompt injection from external data.
- Ingestion points: Raw GitHub URLs listed in the typography reference files (e.g.,
references/typography/heading.md). - Boundary markers: No specific instructions are provided to the agent to treat the fetched content as untrusted or to use delimiters.
- Capability inventory: The agent fetches external content and performs string extraction and adaptation.
- Sanitization: No sanitization or validation of the fetched template content is suggested before processing.
Audit Metadata