skills/mukul975/anthropic-cybersecurity-skills/securing-historian-server-in-ot-environment/Gen Agent Trust Hub
securing-historian-server-in-ot-environment
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains scripts and documentation that execute or recommend the execution of system commands. This includes Python-based network scanning using the
socketlibrary and PowerShell commands for modifying Windows Firewall rules (New-NetFirewallRule) and system audit policies (auditpol). These operations are consistent with the skill's stated purpose of security hardening but represent powerful capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface for indirect prompt injection as it ingests untrusted data and possesses exploitable capabilities.
- Ingestion points: The historian's IP address is ingested as a command-line argument in
SKILL.mdandscripts/agent.py. - Boundary markers: None identified in the prompt interpolation or scripts.
- Capability inventory: Performs network port scanning (
socket.connect_ex) and writes audit reports to the local file system (pathlib,json.dump). - Sanitization: The scripts do not perform validation or sanitization on the provided IP address before initiating network connections.
Audit Metadata