sap-ai-mcp-servers-registry

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides a directory of external GitHub repositories for SAP development tools. It includes instructions for users to clone and install these third-party packages (e.g., git clone and npm install). While these target third-party community repositories (such as marianfoo, oisee, and lemaiwo), the instructions are informational and provided for manual setup by the developer.
  • [CREDENTIALS_UNSAFE]: The skill demonstrates best practices for secret management by instructing users to use environment variable placeholders (e.g., ${SAP_PASSWORD}, ${BTP_SERVICE_KEY}) in configuration files rather than hardcoding actual credentials.
  • [REMOTE_CODE_EXECUTION]: The skill mentions fetching a CHANGELOG.md file via curl from a GitHub repository to check for updates. This is a documentation check and does not involve executing the fetched content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:43 PM
Security Audit — agent-trust-hub — sap-ai-mcp-servers-registry