sapui5
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto download and run the@ui5/mcp-serverpackage from the npm registry. This is the official development tool provided by SAP for providing model context to AI agents. - [COMMAND_EXECUTION]: Shell commands are executed via
npxto initialize development assistance tools such as the UI5 linter and application scaffolder. These tools operate within the local project context. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes user-provided parameters, such as project names and OData service endpoints, which are then used to populate application templates and configuration files.
Audit Metadata