Assess OT/ICS security posture with Purdue asset inventory and IEC 62443 scoring.
npx skills add https://github.com/blamejs/exceptd-skills --skill ot-ics-security
Please help me install this Agent Skill. Skill: ot-ics-security Source: https://github.com/blamejs/exceptd-skills/tree/main/skills/ot-ics-security Command: npx skills add https://github.com/blamejs/exceptd-skills --skill ot-ics-security
Legacy OT/ICS security frameworks like NIST 800-82r3 and IEC 62443-3-3 were designed for pre-AI, air-gapped industrial environments and fail to address mid-2026 threats including AI-augmented HMI attacks, IT/OT convergence risks, and state-sponsored actor TTPs. This skill eliminates the gap between outdated compliance requirements and real-world OT threat reality by providing a structured, actionable assessment methodology tailored to modern industrial control environments.
Use the ot-ics-security skill to conduct a full OT/ICS security posture assessment for your industrial control environment, including Purdue layer asset inventory, IEC 62443 security level scoring, and AI-HMI risk evaluation.
High-intent search queries and answers about installing and using this skill.
OT security posture assessment systematically catalogs assets across Purdue layers L0-L4, scoring zones against IEC 62443 security levels to identify compliance gaps and unpatchable legacy control system risks.
You audit these emerging risks by evaluating AI assistant integrations, vendor remote access paths, and IT/OT bridge surfaces to uncover shadow AI usage by control room staff that traditional frameworks miss.
Yes, this assessment methodology explicitly accounts for OT-specific constraints including multi-decade device lifecycles and unpatchable legacy control systems when evaluating security posture.
Mapping OT incident response plans requires framework-aligned findings mapped to MITRE ATT&CK for ICS, ATLAS, and D3FEND, specifically addressing state-sponsored actor TTPs and mid-2026 threat realities.
Legacy frameworks like NIST 800-82r3 and IEC 62443-3-3 fail because they were designed for pre-AI, air-gapped environments and omit modern threats like AI-augmented HMI attacks and IT/OT convergence risks.
drupadsachaniaAutomate OT/ICS risk assessment, asset discovery, and security governance.
ethanolivertroyTrack compliance status across multiple frameworks and identify gaps.
jfrometaMap adversary techniques to MITRE ATT&CK phases for red-team simulations.
levicarloszGuide ISO 27001 compliance with gap analysis and control implementation.
