convert-ui5-to-fiori-elements
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and runs official SAP development tools using
npx, specifically@sap-ux/fiori-mcp-serverand@sap/generator-fiori. These are well-known packages from a trusted technology vendor. - [COMMAND_EXECUTION]: The skill uses
Bashto perform routine development tasks such as checking the file system (ls), testing OData service connectivity (curl), and managing a local development server (npm start,pkill). These operations are necessary for the skill's stated purpose of scaffolding and testing a web application. - [REMOTE_CODE_EXECUTION]: The skill invokes remote code execution through
npxto run application generators and the UI5 linter. This is a standard workflow for modern JavaScript and SAP development. - [DATA_EXPOSURE]: The skill reads the
manifest.json, controllers, and views of a legacy application to inventory its features. While this involves processing user-provided code, the purpose is to map UI properties to metadata annotations, which is a low-risk analytical task.
Audit Metadata