tia-mac-module-builder
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external engineering resources, which constitutes a potential injection surface.
- Ingestion points: The skill ingests .tiares files, XAML UI definitions, and external help content as described in SKILL.md and architecture-and-lifecycle.md.
- Boundary markers: Instructions establish clear ownership gates to separate generated items from custom extension points.
- Capability inventory: The skill facilitates code generation, project packaging, and TIA Portal Openness mutations.
- Sanitization: The instructions mandate validation of rich text and externally sourced content before rendering, and require explicit human authorization before any state-changing project operations.
- [DYNAMIC_EXECUTION]: The skill manages the lifecycle of generated code via Siemens Module Builder. It mitigates risk by requiring explicit live-operation authorization, inventorying intended mutations, and mandating manual review of generated diffs against known-compatible baselines.
- [EXTERNAL_DOWNLOADS]: The skill references dependencies on standard NuGet packages from established vendors. It proactively instructs the agent to preserve package signature/provenance controls and explicitly warns against adding untrusted package feeds or executing build targets from unapproved sources.
Audit Metadata