joule-cli
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and update of the
@sap/joule-clipackage from the official SAP NPM registry. - [INDIRECT_PROMPT_INJECTION]: The skill describes workflows where the agent processes external files, including Gherkin test scenarios (.feature) and YAML configuration files (capability.sapdas.yaml, da.sapdas.yaml), which creates a surface for indirect prompt injection. * Ingestion points: Data from these files is ingested into the agent's context during the
joule test,joule compile, andjoule deployoperations. * Boundary markers: The skill does not provide specific delimiters or instructions for the agent to ignore potentially malicious instructions embedded within these external files. * Capability inventory: The agent is granted capabilities including authenticated network communication, file system access for configuration, and the ability to trigger deployments. * Sanitization: No explicit validation or sanitization protocols for the ingested content are mentioned in the skill instructions.
Audit Metadata