Security audit
Security checks for vulnerabilities and agentic risk
The skill is mostly a disclosed pharma/OT operations guide, but it claims the edition is read-only while also exposing a high-risk BACnet write tool for plant systems.
Review this skill carefully before installing in a live pharma or cleanroom environment. Treat it as write-capable, not read-only, and only use it where BACnet write operations are explicitly authorized, approval-gated, and blocked for cleanroom or life-safety objects unless your site procedures permit them.
The manifest and description repeatedly claim this pharma edition is read-only, but the documented tool surface includes bacnet_write_property, an explicitly write-capable operation. In an OT/GMP environment, this mismatch can cause an agent or operator to invoke the skill under a false safety assumption, potentially modifying cleanroom or plant-control parameters on live systems.
The documentation explicitly markets the edition as read-only, then later advertises a write path with high-risk BACnet writes, dry-run controls, and approval flow. That contradiction is dangerous because downstream automation may trust the top-level safety claim rather than the later caveat, leading to unauthorized or unsafe writes in pharmaceutical building and process environments.
