The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute standard project management and deployment commands, such as cp, find, rm, mbt build, cf deploy, and afctl. These operations are strictly scoped to the migration process and include multiple user confirmation checkpoints for destructive or deployment-related actions.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project configuration files (like mta.yaml and xs-app.json) to automate the migration. While this represents a potential attack surface for indirect injection, the risk is minimized by the skill's specific focus on structured property extraction and the intended use of this data for legitimate configuration updates.
[EXTERNAL_DOWNLOADS]: The skill fetches documentation and configuration from official SAP domains (help.sap.com) and utilizes the SAP-owned @sap/appfront-cli package. These are verified vendor resources from a trusted organization and are considered safe.
[REMOTE_CODE_EXECUTION]: The skill initiates builds using standard tools like npm install and mbt build within the project context. These actions are necessary for the primary purpose of migrating and deploying SAP applications and do not involve untrusted remote code execution.

migrate