sgds-templates
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides URLs and instructions to fetch JavaScript files from the official GovTech Singapore GitHub repository (
github.com/GovTechSG). These files serve as the source for UI templates and are hosted on a trusted vendor domain. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where the agent fetches external content and processes it to extract HTML. This creates a potential ingestion surface for indirect prompt injection. However, the risk is low as the source is a trusted repository and the instructions specify extracting only the HTML template literal while removing scripts and styles.
Audit Metadata