3gpp-portal-authentication
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill provides code patterns for authenticating with the 3GPP portal using ETSI Online Account (EOL) credentials. The code targets the legitimate domain 'portal.3gpp.org' and includes explicit guidance against hardcoding secrets, recommending environment variables instead.
- [EXTERNAL_DOWNLOADS]: The documentation references the
tdoc_crawlerpackage along with standard libraries likerequestsandBeautifulSoup. These are used appropriately within the context of the skill's stated purpose of fetching 3GPP document metadata. - [PROMPT_INJECTION]: The skill documents an indirect prompt injection surface as it involves parsing HTML content from external web pages. While no specific sanitization logic is provided in the examples, the risk is inherent to the intended web scraping functionality.
Audit Metadata