Singapore

• Outcome: Pass
• Latest audit: May 28, 2026, 1:50 AM
• Version:
  1.0.0

Overview

This is a static Singapore information guide with no code or permissions, though users should verify visa, legal, and travel details before relying on them.

Safe to install as an informational Singapore guide. Treat visa, immigration, legal, safety, prices, and border-crossing details as starting points and verify them against official current sources before making travel, relocation, or compliance decisions.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (7)

Intent-Code Divergence

Medium

• Confidence: 96% confidence
• Finding: The guide tells a new EP holder to 'Get NRIC (IC)' in the first month, but foreign work-pass holders do not receive an NRIC; that identifier is for citizens and permanent residents. In an immigration guide, this kind of inaccurate procedural advice can mislead users about legal status, required documents, and next steps, causing confusion, wasted time, or downstream administrative errors.

Natural-Language Policy Violations

Low

• Confidence: 92% confidence
• Finding: This section explicitly frames social life through an expat lens, with headings like 'Expat Social Scene' and neighborhood recommendations tailored to expatriates. In a general Singapore lifestyle skill, that can bias advice and reduce usefulness or inclusiveness for locals or users who did not opt into expat-centered guidance, though it is not a direct security exploit.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The section explicitly frames neighborhood choice through a default 'Want Expat Community (Western)' lens, which privileges one cultural perspective without offering neutral or user-selected framing. In a relocation guidance skill, this can reinforce exclusionary assumptions and steer users toward biased recommendations, reducing trust and potentially marginalizing users who do not identify with that perspective.

Natural-Language Policy Violations

Low

• Confidence: 91% confidence
• Finding: The text describes Holland Village in terms of 'Western expats' and 'European cafe vibes,' which relies on nationality/cultural generalizations and frames the area around a specific demographic identity. In a location-guidance skill, this can reinforce exclusionary stereotypes and make recommendations feel less neutral or welcoming to users outside that group.

Natural-Language Policy Violations

Low

• Confidence: 84% confidence
• Finding: The 'Ideal for' section explicitly targets 'Western expats' and similar narrow demographics without consistently offering broader, neutral descriptors. While not a cybersecurity issue, this is a genuine policy-risk finding because user-facing recommendation language can encode bias and exclusion in a travel/residential guidance context.

Natural-Language Policy Violations

Low

• Confidence: 87% confidence
• Finding: The text makes categorical safety claims such as 'Completely safe, even alone' and 'Safe at all hours,' which can mislead users into lowering normal situational awareness. In a travel safety guide, absolute assurances are risky because users may rely on them in real-world decisions despite scams, harassment, accidents, or localized exceptions.

Missing User Warnings

Low

• Confidence: 84% confidence
• Finding: The cross-border recommendations encourage trips to Malaysia and Indonesia without consistently warning users about passport validity, entry requirements, visa rules, and potentially severe checkpoint delays. In a travel-planning skill, missing these operational prerequisites can cause stranded travelers, denied entry, missed flights, or unsafe last-minute decisions, making the omission contextually meaningful.

VirusTotal

66/66 vendors flagged this skill as clean.