codesys
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Provides utility commands for network diagnostics, including telnet and socket-based port checks to verify connectivity to PLC services such as the CODESYS Gateway (port 1217) and OPC UA (port 4840).
- [PRIVILEGE_ESCALATION]: Includes instructions for using sudo to manage industrial runtime services (codesyscontrol) and configure host firewalls (ufw) on PLC targets.
- [INDIRECT_PROMPT_INJECTION]: The skill contains a script for parsing exported PLCopen XML data, creating a data ingestion surface. 1. Ingestion points: inspect_plcopen_xml in gemini.md processes user-provided XML files. 2. Boundary markers: None. 3. Capability inventory: XML parsing and console output of extracted program units. 4. Sanitization: None.
Audit Metadata