siemens-tia-portal
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides command-line examples for verifying network connectivity to PLC hardware using the socket library (TCP port 102) and managing TIA Portal processes via the Windows taskkill utility. These are standard troubleshooting and maintenance tasks in the industrial automation domain.
- [DYNAMIC_EXECUTION]: The automation recipes in gpt.md utilize the pythonnet library to dynamically load the Siemens Engineering .NET assembly (Siemens.Engineering.dll) from standard installation paths. This is the primary and authorized method for programmatically interacting with the TIA Portal engineering framework.
- [INDIRECT_PROMPT_INJECTION]: The skill contains a script in gemini.md that generates Structured Control Language (SCL) code based on a user-provided motor name. This represents an attack surface where untrusted data could influence generated logic, although the implementation is a standard engineering template. • Ingestion points: Command-line arguments in gemini.md are used to populate SCL variable names. • Boundary markers: Absent. • Capability inventory: The script performs file system write operations to save generated .scl files. • Sanitization: Absent.
Audit Metadata