oee-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is generating a project structure for manufacturing metrics. It does not contain any malicious patterns or attempts to exfiltrate data.
- [SAFE]: It emphasizes security best practices, explicitly instructing the agent to externalize credentials via environment variables and use encrypted communication (TLS/mutual auth) for industrial protocols like MQTT and OPC UA.
- [PERSISTENCE]: The skill includes a mechanism to append session learnings to a local markdown file (
~/.claude/skills/oee-pipeline/LEARNINGS.md). This is a standard practice for AI agents to maintain state or history and does not constitute a malicious persistence attack. - [REMOTE_CODE_EXECUTION]: While the skill generates a
docker-compose.ymlfile and instructs the user to run it, these are standard developer actions for the intended use case of setting up a local monitoring stack (Grafana, InfluxDB, etc.) and do not involve silent or malicious execution.
Audit Metadata