skills.rest
xalgord
xalgordCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

performing-scada-hmi-security-assessment

Assess SCADA HMI systems for authentication, communication, web, and hardening vulnerabilities per IEC 62443.

954|172|Updated Mar 13, 2026
Search Tags:#vulnerability assessment#hmi#iec 62443#SCADA#ICS#OT security#nist 800-82
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill performing-scada-hmi-security-assessment
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: performing-scada-hmi-security-assessment
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/ot-ics-security/performing-scada-hmi-security-assessment
Command: npx skills add https://github.com/xalgord/xalgorix --skill performing-scada-hmi-security-assessment

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests.

What problem does it solve?

SCADA HMI systems are often assessed like ordinary web applications, which misses OT-specific risks such as cleartext HMI-to-PLC traffic, default vendor credentials, and unauthenticated setpoint writes. This Skill provides a structured methodology to evaluate HMI security against IEC 62443 and NIST SP 800-82 requirements without endangering live production processes.

Core Features & Use Cases

  • Authentication Assessment: Checks password complexity, account lockout, default credentials, role-based access control, session timeouts, and MFA for remote access.
  • Communication & Web Security Checks: Verifies encrypted HMI-PLC channels (OPC UA with TLS), HTTPS usage, and tests web HMIs for XSS, CSRF, IDOR, missing security headers, and CVE-2025-0921 in Ignition SCADA.
  • Hardening & Compliance Reporting: Audits OS patching, unnecessary services, USB restrictions, application whitelisting, and audit logging, then produces a report mapping findings to IEC 62443 security levels.
  • Use Case: During a maintenance window, a security engineer runs the assessment against a mirrored WinCC test instance, confirms default credentials are changed, captures HMI-PLC traffic to verify TLS, and generates a compliance report for an IEC 62443 audit.

Quick Start

Ask the AI to perform a SCADA HMI security assessment on your test HMI instance, covering authentication, communication encryption, web vulnerabilities, and hardening checks aligned with IEC 62443.

Frequently Asked Questions about performing-scada-hmi-security-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security assessment on a SCADA HMI system?▼

Run the assessment workflow against a lab or test HMI mirror, covering four categories: authentication, communication security, web vulnerabilities, and hardening. Each check maps to IEC 62443 requirements and produces a categorized findings report.

What vulnerabilities does HMI security testing check for?▼

It checks default vendor credentials, weak password and lockout policies, missing MFA, cleartext HMI-PLC protocols, XSS, CSRF, IDOR, missing security headers, and CVE-2025-0921 in Ignition SCADA. It also audits patching, USB restrictions, and logging.

Can I test a live production HMI for web vulnerabilities?▼

No, active testing with XSS, CSRF, or IDOR payloads against a live HMI can write to the process and cause upset. Use a lab mirror or a maintenance window with a rollback plan and an operator present.

How do I verify HMI to PLC communication is encrypted?▼

Capture traffic on the HMI-to-PLC segment with Wireshark and verify a TLS handshake, indicating OPC UA with encryption. Cleartext OPC DA or Modbus traffic is a positive finding that must be reported.

When should I not use this HMI assessment approach?▼

Do not use it for PLC-level protocol analysis such as S7comm, for general web application testing on non-OT systems, or on active production HMIs without a maintenance window and rollback plan.

Related Skills

Explore More Software Engineering Skills→
hmislkhmislk
224

commit-code

Generate HMIS-compliant commit messages with issue closing keywords and co-author attribution.

Official
Intermediate
blamejsblamejs

ot-ics-security

Assess OT/ICS security posture with Purdue asset inventory and IEC 62443 scoring.

Official
Advanced
rahmatullahbossrahmatullahboss

Wireshark Network Traffic Analysis

Capture, filter, and analyze network traffic with Wireshark for security investigations.

Community
Intermediate
YukiIto1999YukiIto1999

performing-plc-firmware-security-analysis

Analyze embedded PLC firmware images for hardcoded credentials and insecure update mechanisms.

Community
Advanced