3gpp-tdocs
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for interacting with 3GPP (3rd Generation Partnership Project) standardization resources. All documented behaviors align with standard research and development workflows within the telecommunications industry.
- [EXTERNAL_DOWNLOADS]: The instructions reference official 3GPP domains (
3gpp.org,portal.3gpp.org) for fetching technical specifications. These are authoritative, well-known sources for industry standards, and the skill does not attempt to download code from untrusted or anonymous locations. - [INDIRECT_PROMPT_INJECTION]: The skill involves processing external data from technical documents and web portals, which represents a standard ingestion surface.
- Ingestion points: Technical documents (ZIP, TXT, PDF) and HTML metadata from 3GPP servers.
- Boundary markers: Not explicitly defined in the provided snippets.
- Capability inventory: Uses standard HTTP requests and HTML parsing; no dangerous system-level capabilities (like shell execution or arbitrary file writes) are requested or used.
- Sanitization: Implements ID normalization (uppercase conversion) for consistency, though it does not provide specific content sanitization logic.
- [COMMAND_EXECUTION]: The skill contains Python snippets for regex matching and HTML parsing. These snippets are benign and do not utilize
eval(),exec(), or subprocess calls to execute arbitrary system commands.
Audit Metadata