document-management-sdm
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
mvn clean compileandcf deployfor verification steps, which are standard development and deployment tasks for SAP BTP applications. - [EXTERNAL_DOWNLOADS]: The skill downloads official and well-known dependencies from Maven Central, specifically
org.apache.chemistry.opencmis(OpenCMIS) andorg.apache.httpcomponents(HttpClient) for CMIS protocol and REST API communication. - [DATA_EXPOSURE]: The
ServiceBindingAccessor.javaasset correctly retrieves service credentials (client ID, client secret, and service URLs) from the environment (VCAP_SERVICESvia SAP's Service Binding API) rather than hardcoding them. This is a recommended security practice for cloud applications.
Audit Metadata