sap-btp-developer-guide

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for using various command-line tools such as the Cloud Foundry CLI (cf), CAP CLI (cds), and MTA Build Tool (mbt) to build and deploy business applications.
  • [EXTERNAL_DOWNLOADS]: Includes instructions for downloading development tools and infrastructure modules from well-known sources, including the Cloud Foundry package registry and official SAP-backed GitHub repositories.
  • [PRIVILEGE_ESCALATION]: Contains standard administrative commands using sudo for Linux package management to facilitate the installation of the Cloud Foundry CLI.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a project review capability (/btp-app-readiness-review) that processes local application code and configuration files.
  • Ingestion points: The agent reviews project-level files like mta.yaml, package.json, and application source code to provide readiness guidance.
  • Capability inventory: Instructions allow the agent to invoke build and deployment tools based on the project analysis.
  • Boundary markers: The guidance is presented using standard markdown documentation headers.
  • Sanitization: No explicit sanitization or escaping of the analyzed project content is defined in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 03:36 PM
Security Audit — agent-trust-hub — sap-btp-developer-guide