migrate-custom-code
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes tools such as
SAPWriteandSAPActivateto modify and activate ABAP source code within a connected SAP environment. These operations are essential to the skill's stated purpose of migrating custom code. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to fetch SAP documentation and migration guidance via
search()andsap_notes_search()tools. These operations target reputable documentation sources to support the migration process. - [DYNAMIC_EXECUTION]: The skill generates ABAP code at runtime using LLM-derived patterns or SAP native quickfixes and applies them to the target system via
SAPWrite. This behavior is mitigated by a mandatory syntax check (SAPDiagnose(action="syntax")) and user confirmation requirements. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data including ABAP source code and ATC finding descriptions which could serve as injection vectors.
- Ingestion points:
SAPRead(source code),SAPDiagnose(ATC findings). - Boundary markers: None explicitly defined to wrap external content.
- Capability inventory:
SAPWrite,SAPActivate(can modify system state). - Sanitization: Employs technical validation via
SAPDiagnose(action="syntax")to ensure generated code is syntactically correct before activation.
Audit Metadata