ot-ics-attack
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides functional Python scripts and CLI commands for the manual manipulation of industrial hardware. This includes the ability to read and write PLC registers, toggle coils controlling physical equipment, and execute high-impact commands such as stopping or restarting industrial controllers (e.g.,
plc.plc_stop()andplc.plc_cold_start()). These capabilities could disrupt physical processes if used outside of a controlled environment. - [EXTERNAL_DOWNLOADS]: The instructions direct the agent to download the Industrial Exploitation Framework (ISF) from a third-party GitHub repository (
github.com/dark-lbp/isf.git) and install various specialized Python libraries (e.g.,pymodbus,snap7,pycomm3,opcua,BAC0) and binary tools viacargo(e.g.,mbtget).
Audit Metadata