performing-scada-hmi-security-assessment

Warn

Audited by Socket on Sep 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The install and data-flow story is benign: only a normal PyPI dependency is referenced, with no credential harvesting or suspicious third-party routing. However, the skill’s stated purpose is to help an AI agent perform active SCADA/HMI security testing, including web attack checks, default-credential attempts, and service discovery on OT systems; that makes it a high-risk offensive security capability even though the provided code is mostly illustrative and not overtly malicious.

Confidence: 93%Severity: 78%
Audit Metadata
Analyzed At
Sep 20, 2026, 01:46 PM
Package URL
pkg:socket/skills-sh/mukul975%2Fanthropic-cybersecurity-skills%2Fperforming-scada-hmi-security-assessment%2F@b70f3810da937019306e675d9acbb43dec8ee20f46d254ef3c419408c9005f1a