tia-portal-mcp
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill interfaces with TIA Portal projects to perform engineering tasks like browsing project trees, reading PLC logic, and compiling software. All write-capable tools (e.g.,
update_block_logic,add_network_device) implement a strict safety convention requiring apreviewcall to generate asafetyTokenbefore execution. - [DATA_EXPOSURE]: The skill accesses technical project data including PLC block logic (in SIMATIC SD YAML format), hardware topology, and network configurations (IP addresses and subnets). Access is restricted to the context of the TIA Portal project environment.
- [PROMPT_INJECTION]: While the skill processes external data (PLC block content and project metadata) which could theoretically contain indirect prompt injection triggers, the mandatory human-in-the-loop confirmation and preview/token system provide significant mitigation against unauthorized actions.
Audit Metadata