The Agent Skills Directory

[SAFE]: The skill instructions are aligned with standard SAP development operations. The use of custom tools like SAPTransport and SAPRead for data retrieval is appropriate and correctly scoped to the user's modifiable transports or specific IDs.
[PROMPT_INJECTION]: The skill processes external ABAP source code, which introduces an indirect prompt injection surface.
Ingestion points: Source code content is fetched via the SAPRead tool, and object metadata is retrieved through SAPTransport (Steps 1 and 3).
Boundary markers: The instructions do not explicitly require delimiters or system-level warnings to ignore instructions that might be embedded in the reviewed code.
Capability inventory: The execution environment includes high-impact tools such as SAPActivate and SAPTransport(action="release"), which are mentioned as follow-up options.
Sanitization: No filtering or sanitization of the fetched source code is specified. This is a common characteristic of code review tools and is considered a safe surface in this context given the skill's primary purpose.

sap-transport-review