From caldera-mcp
Safety guardrails and write operation procedures for Ignition gateway modifications. Activates automatically before any write, delete, or modify operation on views, scripts, named queries, UDTs, tags, pages, or gateway event scripts. Covers the write checklist (read first, validate, surgical edits, verify after), QA vs production server rules, backup awareness, snapshot procedures, and read-only mode behavior. If any Caldera MCP write tool is about to be called, this skill provides the safety context.
How this skill is triggered — by the user, by Claude, or both
Slash command
/caldera-mcp:safety-writesThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
This skill provides safety context for write operations on Ignition gateways. It activates
This skill provides safety context for write operations on Ignition gateways. It activates automatically when Claude is about to modify gateway resources.
Before any write operation, consider the environment:
Follow this sequence for every write:
caldera:read_view,
caldera:read_script, etc. to understand what exists.caldera:validate_view_structure before writing views.caldera:update_component or caldera:write_view in
patch mode over full view rewrites. Component-level edits reduce the risk of
accidentally clobbering other parts of the view.caldera:snapshot_project first.Caldera MCP has automatic safety layers. Understanding them helps you work confidently:
If read-only mode is active (visible in caldera:get_gateway_health), all write operations are
blocked. This is usually intentional.
Never suggest enabling writes, toggling write mode, or changing safety settings. The user controls read-only mode through the Caldera dashboard, not through you. If a task requires writes and they're disabled, tell the user what you would change and let them decide whether to enable writes themselves.
If something goes wrong:
caldera:list_backups(project, resource_type) - see available backupscaldera:restore_backup(project, resource_type, path, timestamp) - restore a specific backupcaldera:list_snapshots(project) - see project snapshotscaldera:restore_snapshot(project, snapshot_id) - restore entire project statecaldera:list_gateway_backups() - full gateway .gwbk backups (8.3+ only)npx claudepluginhub jaedync/claude-goodies --plugin caldera-mcpHardens and secures process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT environments. Covers network placement, access control, DMZ data replication, SQL injection prevention, and data integrity protection.
Hardens and secures process historian servers (OSIsoft PI, Honeywell PHD, etc.) in OT environments: network placement, access control, DMZ replication, SQL injection prevention, data integrity.
Hardens process historian servers (OSIsoft PI, Honeywell PHD, GE Proficy, AVEVA Historian) in OT environments with Purdue network placement, DMZ replication via data diodes/PI connectors, access controls, SQL injection prevention, and data integrity protection.