matlab-connect-opcua-client

Pass

Audited by Gen Agent Trust Hub on Aug 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/inspectOpcUaCertificate.m and troubleshooting procedures in references/lds-setup-and-troubleshooting.md use the MATLAB system() function to interact with system diagnostic tools. It calls openssl to parse X.509 certificate data and Windows service utilities (sc, net) to manage the OPC UA Local Discovery Service (LDS) status.
  • [DATA_EXFILTRATION]: The skill documents workflows for managing OPC UA certificates, which involves reading from and writing to the MATLAB preferences directory (prefdir) and system PKI stores (e.g., C:\ProgramData\OPC Foundation\UA\pki\). These operations are consistent with the primary purpose of configuring secure industrial communications.
  • [PROMPT_INJECTION]: The skill handles external data from OPC UA servers and user-provided certificate files, creating a potential surface for indirect prompt injection.
  • Ingestion points: Data is ingested through opcuaserverinfo network queries and by reading certificate files in the inspectOpcUaCertificate utility.
  • Boundary markers: The skill does not implement specific boundary markers or instructions to ignore instructions embedded in metadata or certificate fields.
  • Capability inventory: The environment includes capabilities for command execution via system(), network connectivity via connect(), and file system management through copyfile() and rmdir().
  • Sanitization: The certificate inspection script employs MATLAB's arguments block with {mustBeFile} validation to ensure that inputs are valid file paths before they are processed by external tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 2, 2026, 12:12 PM
Security Audit — agent-trust-hub — matlab-connect-opcua-client