3gpp-working-groups
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides static documentation and data mappings (tbid, SubTB) for 3GPP Technical Specification Groups. It does not contain any executable scripts or perform sensitive operations.
- [EXTERNAL_DOWNLOADS]: References official 3GPP domains (3gpp.org) for standardisation documentation and FTP access. These are well-known, trusted resources used for technical reference.
- [INDIRECT_PROMPT_INJECTION]: The skill documents the process for ingesting and parsing external meeting lists from the 3GPP portal. While this creates a potential surface for indirect injection if the source were malicious, the documented source is a trusted standards organization.
- Ingestion points: 3GPP meeting list pages (SKILL.md).
- Boundary markers: Absent in current documentation.
- Capability inventory: None; the skill is purely informational.
- Sanitization: Provides a normalization function in Python to validate and canonicalize meeting codes.
Audit Metadata