T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/ifa_to_codesys.ps1:51- Finding
Malformed Recipe Header Causes Unhandled Failure in Binary-to-Text Conversion
- Content
View full analysis
- Remediation
View remediation
Security audit
Ifa Codesys Recipe
Security checks for vulnerabilities and agentic risk
Overview
The skill is a local PLC recipe converter, but its conversion scripts have material validation and serialization flaws that could produce unsafe or unusable recipe artifacts.
Review this skill carefully before using it in any PLC or production recipe workflow. It does not appear to steal data or persist on the system, but generated recipe files should be validated independently, especially numeric type widths and RecipeConfig.json schema checksums, before importing or deploying them.
Vulnerability Patterns
- Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (4)
T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/fill_cam_data.ps1:46- Finding
Malformed ProdData Header Causes Unhandled Cam-Data Processing Failure
- Content
View full analysis
- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Error
- Location
scripts/codesys_to_ifa.ps1:88- Finding
Value-Based Width Selection Corrupts Generated iFA Recipe Records
- Content
View full analysis
- Remediation
View remediation
T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/codesys_to_ifa.ps1:34- Finding
Missing Recipe Configuration Fails Open with a Zero-Filled Schema Checksum
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Hidden Instructions
High
- Category
- Prompt Injection
- Confidence
- 60% confidence
- Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
- Content
md --- name: ifa-codesys-recipe description: "Manage CODESYS PLC recipes via iFA Evolution �� create, modify, deploy recipe configurations" tags: [domain-specific, plc, cli, file-based, report-generation]
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 84% confidence
- Finding
This file contains user-facing natural-language documentation in a single fixed language, which can violate language/locale policy when no user opt-in or justification is provided. The synopsis, description, parameter text, and example are presented only in Chinese, and the file does not indicate that the skill is intended exclusively for a Chinese-speaking audience.
- Content
Natural-Language Policy Violations
Low
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
This PowerShell skill embeds its synopsis, description, and parameter help entirely in Chinese, which imposes a specific language/locale on users without any opt-in or alternative. The policy specifically calls out language or locale constraints as violations when the skill does not offer user choice or clearly justify the restriction.
- Content
Static analysis
No suspicious patterns detected.