sap-fiori-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists exclusively of markdown documentation and design specifications. There are no executable scripts (.py, .js, .sh) or code components that could execute logic in the host environment.
- [PROMPT_INJECTION]: Static analysis flagged potential concealment patterns in files like
references/fiori-elements.md. Manual review confirms these are legitimate user interface design guidelines (e.g., instructions for developers on how to use theUI.Hiddenannotation or how the system should handle 'hiding drafts') and not attempts to manipulate the AI agent's internal behavior or bypass safety filters. - [DATA_EXFILTRATION]: No patterns for accessing sensitive files (such as SSH keys or environment variables) or hardcoded credentials were found. The skill does not perform any network operations to send data to external servers.
- [EXTERNAL_DOWNLOADS]: All external links point to authoritative domains owned by SAP (e.g.,
sap.com,hana.ondemand.com), standard design tools (figma.com), or the official skills registry from Vercel Labs. These are well-known and trusted sources. - [NO_CODE]: The skill is informative in nature, providing the agent with context to assist in Fiori-related design tasks without introducing any functional capabilities that require security permissions.
Audit Metadata