TIA HW AUDITOR

Use TIA Openness to compare hardware and I/O configuration between field and master backups.

This skill appears to be what it claims (an auditor for Siemens TIA backups) but has gaps that could lead to unsafe behavior. Before installing or enabling it, do the following: (1) Obtain and review the actual audit script(s) (TIA-HW-Audit.ps1 / tia_hw_audit.bat) — they are not bundled; do not let the agent fetch/execute an unknown script automatically. (2) Clarify and lock down the 'configured paths' the skill will read; avoid granting wide filesystem or network-share mounts. (3) Ensure PowerShell and Siemens TIA Portal/Openness are present and licensed if needed, and declare these dependencies. (4) Run the audit in a restricted environment or with a dedicated account that has only the necessary read access to the specific .zap18 backups. (5) If you need a higher-assurance verdict, provide the actual script code and the exact configured-paths/auth model so the scripts and instructions can be reviewed for unexpected network calls or exfiltration.

Type: OpenClaw Skill Name: tia-hw-auditor Version: 1.0.0 The skill bundle requests high-risk 'shell' and 'filesystem' permissions to execute external batch and PowerShell scripts and mount network paths (e.g., \\nas\factory and \\vault\engineering). While these capabilities are aligned with the stated purpose of auditing Siemens TIA Portal hardware configurations, the ability to run arbitrary external commands and access sensitive industrial project files (.zap18) constitutes a significant security risk and high-privilege surface area without evidence of malicious intent in the provided files (SKILL.md, Scripts/README.md).