matlab-use-opcua-client
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/inspectOpcUaCertificate.muses the MATLABsystem()function to invoke external utilities such asopensslfor certificate inspection andwhere/command -vfor environment checks. The inputs are validated using MATLAB'smustBeFilevalidation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external OPC UA servers and certificate files, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Server namespace browsing (
uaClient.Namespace), discovery queries (opcuaserverinfo), and certificate file reading (inspectOpcUaCertificate). - Boundary markers: None identified for external data ingestion.
- Capability inventory: The skill performs network operations (OPC UA), file system access (certificate stores), and command execution (
system()calls). - Sanitization: Input file paths are validated via
mustBeFilein the diagnostic script. - [PRIVILEGE_ESCALATION]: The documentation in
references/lds-setup-and-troubleshooting.mdincludes instructions for users to run Windows service management commands (net start,sc query) with Administrator privileges. This is documented for manual user troubleshooting and is not automated by the agent.
Audit Metadata