sap-btp-job-scheduling
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of shell commands using
curland the Cloud Foundry (cf) CLI for service management, authentication, and job scheduling operations (documented inreferences/rest-api.md,references/setup-guide.md, andreferences/security.md). These are standard administrative actions for the target platform.\n- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions for installing official SAP Node.js packages including@sap/jobs-client,@sap/xsenv, and@sap/xssecfrom the public npm registry, as seen inSKILL.mdandreferences/rest-api.md. These are verified libraries for SAP BTP development.\n- [INDIRECT_PROMPT_INJECTION]: The skill guides the agent in generating and potentially processing job configurations and action endpoint responses. This presents a surface for indirect prompt injection if the agent interacts with untrusted external data during job execution or log analysis.\n - Ingestion points: The skill uses templates (
templates/job-creation.json) and service responses (run logs) described inreferences/rest-api.md.\n - Boundary markers: No explicit delimiter or security warnings for the agent regarding the separation of instructions and external data are present in the core instructions in
SKILL.md.\n - Capability inventory: The skill utilizes network operations via
curl, management viacfCLI, and file-based configurations acrossreferences/rest-api.mdandreferences/setup-guide.md.\n - Sanitization: Input validation instructions are limited to basic character restrictions for job names in
references/concepts.mdandreferences/rest-api.md.
Audit Metadata