T05 · Unauthorized Access and Privilege Escalation
Error
- Location
scripts/tools/run_script.ps1:70- Finding
Untrusted Configurable DLL Loading in an Elevated PowerShell Process
- Content
View full analysis
- Remediation
View remediation
Security audit
tia-portal-openness
Security checks for vulnerabilities and agentic risk
Overview
The skill appears aimed at legitimate TIA Portal automation, but it asks users to run elevated PowerShell while loading a DLL from an editable config path without validation.
Review this before installing on an engineering workstation. Only use it if you trust the skill source, verify env.json points to the real local Siemens API directory, avoid administrator PowerShell unless Siemens specifically requires it, and understand that imported or compiled SCL may change PLC project artifacts.
Vulnerability Patterns
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)
Hidden Instructions
High
- Category
- Prompt Injection
- Confidence
- 60% confidence
- Finding
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
- Content
md --- name: tia-portal-openness description: "Automate TIA Portal via Openness API for PLC project engineering" tags: [domain-specific, plc, cli, api-integration, file-based]
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This PowerShell skill includes its synopsis, description, parameter help, and examples in Chinese, and the runtime messages also continue in that locale. Under the stated policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified, which is not present here.
- Content
Intent-Code Divergence
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The description says all paths are read from references/env.json and 'never hardcoded'. However, the env action explicitly searches hardcoded locations under C:\Program Files\Siemens\TIA Portal* and D:\Program Files\Siemens\TIA Portal* to discover the installation. This is a direct contradiction between the documentation and the implemented behavior.
- Content