tia-project-general
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical repository for TIA Portal Openness API documentation. The provided C# code snippets use standard namespaces (
Siemens.Engineering) and follow best practices, such as usingSecureStringfor credential handling inreferences/umac-and-auth.md. - [PROMPT_INJECTION]: The skill documents how to ingest data from external project files, which constitutes a potential surface for indirect prompt injection. This is a standard requirement for the skill's purpose but involves reading attacker-controllable fields.
- Ingestion points: Reading attributes such as
project.Comment,project.Name, andproject.HistoryEntries(found inreferences/project-attributes.mdandreferences/language-settings.md). - Boundary markers: The reference patterns do not include explicit markers to delimit untrusted project text.
- Capability inventory: The skill facilitates project creation, modification, and software/hardware compilation via the
ICompilableservice (found inreferences/project-lifecycle.mdandreferences/compile.md). - Sanitization: No text sanitization or validation logic is demonstrated in the examples when reading project metadata.
Audit Metadata