genai-hub-foundation-models

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to interact with SAP AI Core services using the official sap-ai-sdk-core Python package. It performs standard administrative and discovery tasks.
  • [SAFE]: The Python script scripts/list_foundation_models.py uses the AICoreV2Client from the official SAP SDK to communicate with the SAP AI Core REST API (/v2/lm/scenarios/foundation-models/models). Authentication is handled via Bearer tokens obtained through a separate trusted credential management skill.
  • [SAFE]: The skill includes security-conscious instructions, specifically advising against redirection (2>&1) or piping of token-fetching commands to prevent accidental leakage of sensitive JWT tokens into the agent's conversation logs.
  • [SAFE]: The reference documentation (references/MODELS.md) provides standard curl examples for various AI providers (Azure, Google, AWS, etc.) supported within the SAP GenAI Hub ecosystem. These examples use environment variables for sensitive data ($TOKEN) and target the user's own deployment URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 11:25 AM