Start a fresh conversation. Replace the highlighted placeholders.
Use ot-ics to review [authorized topology, asset, and configuration evidence] within [written owner scope and safety boundaries], producing a Purdue L0–L5 zone sketch, asset inventory, authorized-segment protocol/port baseline, and evidence-backed exposure or zoning findings with physical/process impact, assumptions, and unknowns. Work only from the supplied materials; do not probe, scan, connect, write to PLC/SIS, disrupt operations, or perform firmware or deep protocol analysis. Before any later target command, identify the exact target, confirm written permitted scope, show its effect, and wait for explicit current-conversation confirmation.
Required inputs
[authorized topology, asset, and configuration evidence]
[written owner scope and safety boundaries]
User-approved starter prompt based on a pinned source version; check current skill requirements before running. Task evidence ↗
⚠️ AUTHORIZED USE ONLY
This skill is for educational purposes or authorized security assessments only.
You must have explicit, written permission from the system owner before using this tool.
Misuse of this tool is illegal and strictly prohibited.
Mandatory confirmation gate
Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
Ask the user to state the exact target URL, IP, account, or resource.
Ask the user to confirm written authorization and the permitted scope.
Show the exact command(s) and explain their expected effect.
Wait for explicit confirmation in the current conversation.
Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
OT / ICS Security
When to Use
Passive assessment of industrial networks within an approved scope.
Documenting PLC/SCADA exposure and zoning violations.
适用场景
工控/SCADA/DCS 安全评估（授权）
Purdue 模型分区与跨区通道
Modbus/DNP3/S7/EtherNet/IP 等协议暴露
工程师站、HMI、历史库、跳板主机
IT/OT 融合边界（防火墙规则、单向闸）
安全铁律（MUST）
MUST NOT 在未明确允许时：
- 对 PLC 写线圈/寄存器
- 全网高速率扫描生产 OT
- 中断安全仪表系统（SIS）相关路径
优先：只读识别、流量镜像、离线固件/配置分析