sap-object-documenter
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is focused on generating documentation for SAP ABAP objects. It uses a set of specialized tools (SAPRead, SAPSearch, SAPContext, SAPLint, SAPTransport) to retrieve technical metadata and code, which is then summarized and saved locally using a Write tool. These actions are consistent with the skill's stated purpose.- [PROMPT_INJECTION]: The skill ingests external data (ABAP source code), which introduces a surface for indirect prompt injection.
- Ingestion points: Source code and metadata are retrieved in Step 2 using the
SAPReadandSAPSearchtools. - Boundary markers: None. The instructions do not define delimiters or warnings for the agent to ignore instructions embedded in the processed ABAP source code.
- Capability inventory: The agent has access to the local file system (
Writetool) and the ability to query SAP system metadata. - Sanitization: None. The skill does not implement filtering or escaping for the retrieved source code before summarizing it.
Audit Metadata