cap-mcp-server
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing official SAP development tools, specifically
@sap/cds-mcp,@sap/ui5-mcp-server, and@sap/fiori-mcp-servervia npm. These are standard packages from a well-known enterprise software provider. - [COMMAND_EXECUTION]: The documentation includes configuration snippets that use
npxto launch the MCP servers. This is the standard execution method for the Model Context Protocol and is scoped to the project's development dependencies. - [INDIRECT_PROMPT_INJECTION]: The
cap-model-exploreragent uses tools likesearch_modelandsearch_docsto ingest project metadata and official documentation. This is a standard functional pattern for this type of agent, used to provide context-aware assistance rather than executing untrusted instructions.
Audit Metadata