addin-operations

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate development templates and documentation for the Siemens TIA Portal Add-In framework. All references point to official Siemens domains (siemens.com) or standard installation paths for industrial automation software.
  • [COMMAND_EXECUTION]: The skill utilizes the dotnet new command to instantiate projects from templates. This is a standard .NET CLI operation and is explicitly permitted within the skill's configuration context.
  • [EXTERNAL_DOWNLOADS]: The documentation recommends the use of ilspycmd (installed via dotnet tool install) for assembly decompilation. This is a well-established tool in the .NET ecosystem used for legitimate development and migration tasks.
  • [REMOTE_CODE_EXECUTION]: While the skill documents APIs for starting external processes (Siemens.Engineering.AddIn.Utilities.Process), it does so within the context of explaining the TIA Portal sandbox and permission model. It does not provide or execute unauthorized remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 07:55 AM
Security Audit — agent-trust-hub — addin-operations