sap-bw-query
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes a deployment tool (
bw_studio_deploy) designed to install a portable Eclipse and SAP BW Modeling Tools bundle. This process supports local ZIP files and remote release channels. Security documentation specifies that remote downloads are signature-gated and hash-verified to ensure integrity. - [COMMAND_EXECUTION]: Orchestration is handled via PowerShell scripts (
BwStudio.ps1,Start-BwMcp.ps1) which manage the studio lifecycle, including launching Eclipse with security-hardened flags like-noPwdStoreand setting up machine-local named pipes for automation. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it processes external metadata from SAP BW InfoProviders and user-supplied QuerySpec JSON files. However, the architecture mitigates this through a bidirectional 'secret-guard' that scans all inputs and outputs for credentials and strictly limits automation to unsaved memory buffers, requiring human action for any persistence.
Audit Metadata