sap-fiori-create-cli
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates running the official
@sap-ux/createCLI tool via npx to perform project generation, configuration, and maintenance tasks. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch the latest version of@sap-ux/createfrom the official NPM registry. This is a standard and safe operation for accessing official SAP development tools. - [DATA_EXFILTRATION]: The skill manages backend system configurations stored in
~/.fioritoolsand utilizes the OS keychain for secure credential storage. These actions are standard for SAP Fiori development workflows and do not involve unauthorized data movement. - [PROMPT_INJECTION]: The migration workflow in
references/convert-preview-config.mdincludes a surface for indirect prompt injection when processing project files. - Ingestion points: The agent reads script content from user-controlled
*_old.htmlfiles during migration. - Boundary markers: No specific delimiters are used to wrap the untrusted code during processing.
- Capability inventory: The agent performs file system writes to create initialization scripts and updates configuration files (
ui5.yaml,karma.config.js). - Sanitization: The skill requires the agent to display extracted code to the user for confirmation before applying changes, providing a manual oversight layer.
Audit Metadata