performing-scada-hmi-security-assessment
Warn
Audited by Socket on Sep 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The install and data-flow story is benign: only a normal PyPI dependency is referenced, with no credential harvesting or suspicious third-party routing. However, the skill’s stated purpose is to help an AI agent perform active SCADA/HMI security testing, including web attack checks, default-credential attempts, and service discovery on OT systems; that makes it a high-risk offensive security capability even though the provided code is mostly illustrative and not overtly malicious.
Confidence: 93%Severity: 78%
Audit Metadata