skills/secondsky/sap-skills/sap-datasphere/Socket

sap-datasphere

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: the core documentation and official SAP CLI usage fit the stated SAP Datasphere purpose, and the SFTP mentions are benign product references. The main risk is the third-party MCP server run via npx and given SAP OAuth credentials, plus its access to mutating tenant operations; this makes the skill materially riskier than a documentation-only or SAP-only workflow skill.

Confidence: 89%Severity: 82%

Audit Metadata

Analyzed At

Sep 15, 2026, 07:17 AM

Package URL

pkg:socket/skills-sh/secondsky%2Fsap-skills%2Fsap-datasphere%2F@7331c3a98fa730d41a386d3ebc74c037f18d45f5ab4309cac354943a9866030b