generate-rap-logic
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing natural language instructions to generate executable ABAP code.\n
- Ingestion points: User-provided natural language descriptions of desired business logic (SKILL.md).\n
- Boundary markers: None explicitly defined for the interpolation of user input into code generation prompts.\n
- Capability inventory: Ability to modify class methods and activate objects via SAPWrite(action="edit_method") and SAPActivate.\n
- Sanitization: Mitigated by requiring explicit user approval before writing and performing syntax checks via SAPDiagnose.\n- [COMMAND_EXECUTION]: The skill performs dynamic script generation and modification within the SAP environment.\n
- Evidence: Uses SAPWrite(action="edit_method") to update ABAP code in behavior pool classes.\n
- Context: This functionality is documented as the skill's primary purpose; code is generated from predefined templates based on SAP system metadata and is subject to user review prior to execution.
Audit Metadata