generate-rap-service-researched

Pass

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests natural language business requirements from the user and reads existing source code from the SAP system via SAPRead and SAPSearch tools. This creates a surface where external content or existing code patterns could influence the generation of new artifacts. * Ingestion points: User-provided business descriptions and existing system repository objects (BDEFs, DDLS, and classes) analyzed in Phase 1. * Boundary markers: Mandatory human-in-the-loop review and explicit approval of the implementation plan (Phase 3b) before any write operations occur. * Capability inventory: SAPWrite for creating artifacts, SAPActivate for deployment and activation, and SAPManage for system-level probes. * Sanitization: The process relies on user review of the planning documents and subsequent automated system quality checks (ATC and Lint).
  • [DYNAMIC_EXECUTION]: The skill generates and activates repository objects, including ABAP behavior pool classes and CDS view entities, based on research data and predefined templates. * Script generation: Assembly and writing of source code for multiple SAP object types using SAPWrite based on the user-approved implementation plan. * Execution: Lifecycle management and activation of the generated artifacts on the SAP system via the SAPActivate tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 27, 2026, 01:14 PM