atc-cloudification
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references configuration and mapping data hosted on SAP's official GitHub repository. These files provide the necessary metadata for ATC cloud readiness checks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes information from external JSON files to help classify custom code. Evidence Chain: 1. Ingestion points: objectReleaseInfo*.json and objectClassifications*.json from github.com/SAP; 2. Boundary markers: Absent; 3. Capability inventory: No internal scripts or code; 4. Sanitization: Absent. The source is a well-known vendor, and there are no high-risk capabilities.
Audit Metadata