sap-bw-query

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads Eclipse/BWMT bundles and updates from a remote release channel (configured via ReleaseChannelUrl) or local artifacts. These downloads are secured using SHA-512 integrity checks and RSA-SHA256 manifest signatures.
  • [COMMAND_EXECUTION]: Utilizes local PowerShell scripts (BwStudio.ps1 and Build-BwStudio.ps1) to manage deployment, diagnostic checks, and the launching of the bundled automation environment.
  • [SAFE]: Implements an explicit safety contract that refuses all passwords and credentials, requiring users to interact only with native SAP login dialogs. It also restricts operations to read-only query inspection and unsaved local drafts to prevent accidental backend modifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 04:00 AM
Security Audit — agent-trust-hub — sap-bw-query