skills/mukul975/anthropic-cybersecurity-skills/detecting-attacks-on-historian-servers/Gen Agent Trust Hub
detecting-attacks-on-historian-servers
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Historian APIs for analysis. While this represents an ingestion surface for potentially untrusted data, the risk is low as the data is used for monitoring and reporting purposes without triggering dangerous downstream actions.
- Ingestion points: API response data from OSIsoft PI and Ignition endpoints in
SKILL.mdandscripts/agent.py. - Boundary markers: None defined for API data.
- Capability inventory: Network communication via
requestsandsocketinscripts/agent.py. - Sanitization: The script parses JSON responses; no specific sanitization is applied to the content before it is included in the output report.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were found. The skill uses safe placeholders for API credentials in its example configurations and relies on user-provided arguments at runtime for actual authentication.
- [COMMAND_EXECUTION]: The skill does not perform arbitrary shell command execution or spawn subprocesses. All network and file operations are conducted through standard Python library calls.
Audit Metadata