sap-fiori-analytical-chart
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for indirect prompt injection by requesting user inputs (Entity, Dimension, Measure) and interpolating them into code templates. This is a common pattern in development skills where the agent assists in generating boilerplate code based on project metadata.
- Ingestion points: The skill explicitly collects user inputs for 'Entity', 'Dimension field', 'Measure field', 'Aggregation method', 'Chart type', and 'Display mode' (SKILL.md).
- Boundary markers: No explicit delimiters or instructions to sanitize these inputs are provided in the templates.
- Capability inventory: The skill provides instructions for modifying project files such as CDS definitions, ABAP source code, and manifest.json (SKILL.md).
- Sanitization: No sanitization logic for user-provided identifiers is mentioned.
- [SAFE]: The skill references official documentation from SAP's trusted domains (sap.com) and utilizes well-known development tools such as the SAP Fiori MCP Server and official VS Code extensions. All identified behaviors are consistent with its stated purpose of assisting in SAP Fiori application development.
Audit Metadata