tia-portal-mcp
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill handles data from TIA Portal projects, creating a surface for indirect prompt injection if an attacker embeds instructions within PLC comments or logic.
- Ingestion points: Untrusted project data is ingested via
get_block_content,list_tag_tables, andread_hardware_config. - Boundary markers: Absent. The instructions do not specify delimiters or system instructions to ignore embedded commands within the SIMATIC SD YAML or tag tables.
- Capability inventory: The agent has the capability to perform state-changing operations including
update_block_logic,add_network_device, andconfigure_network_device. - Sanitization: The instructions do not mention sanitization or validation of the ingested YAML content beyond standard parsing.
Audit Metadata