matlab-connect-opcua-client
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/inspectOpcUaCertificate.mand troubleshooting procedures inreferences/lds-setup-and-troubleshooting.mduse the MATLABsystem()function to interact with system diagnostic tools. It callsopensslto parse X.509 certificate data and Windows service utilities (sc,net) to manage the OPC UA Local Discovery Service (LDS) status. - [DATA_EXFILTRATION]: The skill documents workflows for managing OPC UA certificates, which involves reading from and writing to the MATLAB preferences directory (
prefdir) and system PKI stores (e.g.,C:\ProgramData\OPC Foundation\UA\pki\). These operations are consistent with the primary purpose of configuring secure industrial communications. - [PROMPT_INJECTION]: The skill handles external data from OPC UA servers and user-provided certificate files, creating a potential surface for indirect prompt injection.
- Ingestion points: Data is ingested through
opcuaserverinfonetwork queries and by reading certificate files in theinspectOpcUaCertificateutility. - Boundary markers: The skill does not implement specific boundary markers or instructions to ignore instructions embedded in metadata or certificate fields.
- Capability inventory: The environment includes capabilities for command execution via
system(), network connectivity viaconnect(), and file system management throughcopyfile()andrmdir(). - Sanitization: The certificate inspection script employs MATLAB's
argumentsblock with{mustBeFile}validation to ensure that inputs are valid file paths before they are processed by external tools.
Audit Metadata