migrate-custom-code

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes tools such as SAPWrite and SAPActivate to modify and activate ABAP source code within a connected SAP environment. These operations are essential to the skill's stated purpose of migrating custom code.
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to fetch SAP documentation and migration guidance via search() and sap_notes_search() tools. These operations target reputable documentation sources to support the migration process.
  • [DYNAMIC_EXECUTION]: The skill generates ABAP code at runtime using LLM-derived patterns or SAP native quickfixes and applies them to the target system via SAPWrite. This behavior is mitigated by a mandatory syntax check (SAPDiagnose(action="syntax")) and user confirmation requirements.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data including ABAP source code and ATC finding descriptions which could serve as injection vectors.
  • Ingestion points: SAPRead (source code), SAPDiagnose (ATC findings).
  • Boundary markers: None explicitly defined to wrap external content.
  • Capability inventory: SAPWrite, SAPActivate (can modify system state).
  • Sanitization: Employs technical validation via SAPDiagnose(action="syntax") to ensure generated code is syntactically correct before activation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 04:36 PM
Security Audit — agent-trust-hub — migrate-custom-code