sap-hana-cli
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from SAP HANA databases through tools like query and sample_data. * Ingestion points: Database query results in SKILL.md. * Boundary markers: No explicit boundary markers or ignore instructions mentioned in prompts. * Capability inventory: Command execution via querySimple, callProcedure, and hdbsql; container and user management in command-reference.md. * Sanitization: Documentation in references/development-environment.md mentions built-in validation functions like isAcceptableParameter to prevent SQL injection. The risk is inherent to database administration tools and is documented with mitigations.- [EXTERNAL_DOWNLOADS]: The skill instructions include installing official packages like hana-cli and hana-mcp-server from npm. It also refers to installing the BTP CLI via a script from the SAP GitHub repository. These are documented as necessary setup steps for the intended development functionality.- [CREDENTIALS_UNSAFE]: The documentation provides guidance on configuring database credentials using environment variables and configuration files like .env and .cdsrc-private.json. It correctly advises users to exclude these files from version control via .gitignore to prevent accidental disclosure. Example configurations in documentation use clearly marked placeholder values.
Audit Metadata