dengue-risk-advisor-skill
Pass
Audited by Gen Agent Trust Hub on Jun 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities were detected in the skill instructions or associated scripts.
- [EXTERNAL_DOWNLOADS]: Fetches public environmental data from official Singapore government domains (api.data.gov.sg and api-open.data.gov.sg) and location services from OneMap. These are verified well-known services and the skill uses them strictly for its intended purpose.
- [DATA_EXFILTRATION]: No data exfiltration detected. The skill does not access sensitive local files and only transmits town names to government APIs to retrieve environmental risk factors.
- [CREDENTIALS_UNSAFE]: The skill correctly manages API keys by reading from environment variables instead of hardcoding them, as documented in the provided .env.example file.
Audit Metadata