skills/secondsky/sap-skills/sapui5/Gen Agent Trust Hub

sapui5

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to download and run the @ui5/mcp-server package from the npm registry. This is the official development tool provided by SAP for providing model context to AI agents.
  • [COMMAND_EXECUTION]: Shell commands are executed via npx to initialize development assistance tools such as the UI5 linter and application scaffolder. These tools operate within the local project context.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes user-provided parameters, such as project names and OData service endpoints, which are then used to populate application templates and configuration files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 06:27 AM
Security Audit — agent-trust-hub — sapui5