hardware-ot-ics
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill outlines a passive-first methodology for OT/ICS security assessments, emphasizing safety, authorization, and adherence to the Purdue model. It provides specific instructions for using industry-standard tools like
tsharkandnmapwith cautious parameters (e.g., low scan rates) to avoid impacting sensitive industrial equipment.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it involves processing external data sources such as network traffic captures and firmware images.\n - Ingestion points: Network traffic (PCAP files), controller configuration exports (e.g., TIA Portal), and firmware binaries.\n
- Boundary markers: The methodology references
tradecraft-scope-roeand requires explicit written authorization to define operational boundaries.\n - Capability inventory: Tools include
wireshark,tshark,nmap,binwalk, andghidrafor analysis and identification.\n - Sanitization: No specific sanitization or filtering of the ingested binary or traffic data is described within the skill instructions.
Audit Metadata