The Agent Skills Directory

[COMMAND_EXECUTION]: The skill makes extensive use of the snowflake_sql_execute tool to perform administrative tasks, such as creating databases, schemas, zerocopy connectors, and catalog-linked databases. These operations are the primary function of the skill and follow Snowflake's official documentation for SAP BDC integration.
[INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data, specifically when listing data products from SAP BDC and processing user-provided invitation links and CSN documents. While these inputs influence the agent's behavior (e.g., generating metadata or configuring connectors), the risk is low as the data is used in structured SQL operations within an administrative context.
Ingestion points: Invitation links from SAP for Me (create-connector/INSTRUCTIONS.md), share lists from SAP BDC (consume/INSTRUCTIONS.md), and user-provided or generated CSN JSON (publish/INSTRUCTIONS.md).
Boundary markers: Absent; the skill relies on standard SQL parameter interpolation and user verification of generated metadata.
Capability inventory: Uses snowflake_sql_execute to write data, create objects, and manage shares; Bash for local file operations during installation.
Sanitization: Relies on standard Snowflake system functions like SYSTEM$SAP_PUBLISH_DATA_PRODUCT to handle the final publication payload.
[PRIVILEGE_ESCALATION]: The skill includes instructions to grant operational privileges (OPERATE, USAGE, MODIFY) on connectors and databases. These grants are scoped to the objects created by the skill and are necessary for its documented purpose of lifecycle management. The skill explicitly checks for the CREATE DATABASE and CREATE SHARE account-level privileges before proceeding with sensitive tasks.

manage-zerocopy-sapbdc