plc-code-analysis
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs local analysis of provided PLC code without making external network requests or downloading untrusted content.
- [SAFE]: It utilizes a predefined set of MCP tools specifically designed for TIA Portal context retrieval (e.g., browsing project trees, reading hardware config), which are used legitimately within the engineering review workflow.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted PLC code and SimaticML XML data. There is an inherent surface for indirect injection where malicious content within the analyzed code could attempt to influence the agent's report, though this is a standard risk for analysis tools.
Audit Metadata