automation-pilot-executor-httprequest
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as documentation for configuring the
http-sapcp:HttpRequest:1executor within the SAP Automation Pilot platform. It contains no executable code, obfuscation, or malicious instructions. - [PROMPT_INJECTION]: The content proactively addresses security by mandating the use of
toUrlEncodedandtoEscapedJsonfor dynamic values. This guidance helps prevent common injection-style vulnerabilities where untrusted input could break URL structures or JSON payloads. - [COMMAND_EXECUTION]: Examples provided demonstrate legitimate use of HTTP requests for enterprise automation tasks, including OAuth and Basic authentication. The target domains (e.g., *.hana.ondemand.com) are official SAP Cloud platform endpoints associated with the author (SAP).
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill correctly uses property placeholders like
$(.execution.input.password)and$(.execution.input.clientSecret), instructing users to pass sensitive data via the platform's input mechanism rather than hardcoding it.
Audit Metadata