matlab-use-opcua-client

Pass

Audited by Gen Agent Trust Hub on Aug 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/inspectOpcUaCertificate.m uses the MATLAB system() function to invoke external utilities such as openssl for certificate inspection and where/command -v for environment checks. The inputs are validated using MATLAB's mustBeFile validation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external OPC UA servers and certificate files, which represents a potential attack surface for indirect prompt injection.
  • Ingestion points: Server namespace browsing (uaClient.Namespace), discovery queries (opcuaserverinfo), and certificate file reading (inspectOpcUaCertificate).
  • Boundary markers: None identified for external data ingestion.
  • Capability inventory: The skill performs network operations (OPC UA), file system access (certificate stores), and command execution (system() calls).
  • Sanitization: Input file paths are validated via mustBeFile in the diagnostic script.
  • [PRIVILEGE_ESCALATION]: The documentation in references/lds-setup-and-troubleshooting.md includes instructions for users to run Windows service management commands (net start, sc query) with Administrator privileges. This is documented for manual user troubleshooting and is not automated by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 30, 2026, 08:37 AM
Security Audit — agent-trust-hub — matlab-use-opcua-client