sap-ai-core
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute shell commands using the
btpCLI for infrastructure provisioning andcurlfor managing AI Core resources and retrieving authentication tokens. - [CREDENTIALS_UNSAFE]: The workflow involves extracting sensitive OAuth2 credentials (Client ID and Client Secret) from service bindings and storing them in environment variables for API authentication.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion surface where the agent processes external data from service binding files and API responses to determine deployment statuses and available models.
- Ingestion points: Processes JSON output from the
btpCLI and SAP AI Core API responses viajqandcurl(e.g.,ai-core-key.json). - Boundary markers: None explicitly defined for the ingested data.
- Capability inventory: Shell command execution (
btp,curl,jq) and execution of local preflight scripts (scripts/region-preflight/region-preflight.sh). - Sanitization: Relies on structural parsing using
jqto extract specific fields from the JSON data.
Audit Metadata