sap-commerce-cloud
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The utility script
scripts/query-items.shuses local shell commands, includingcurl, to interact with the Hybris Administration Console (HAC) API. This is used to automate administrative tasks. - [REMOTE_CODE_EXECUTION]: The script
scripts/query-items.shenables the remote execution of Groovy code on a target SAP Commerce instance via the platform's standard scripting console endpoint. This is a common developer workflow for querying and managing enterprise commerce data. - [EXTERNAL_DOWNLOADS]: The
references/composable-storefront.mddocumentation describes how to download and install official SAP Angular libraries (@spartacus/*) from well-known repositories, including the SAP RBSC and public npm registries. - [COMMAND_EXECUTION]: The script
scripts/generate-extension.shperforms file system operations on the local machine to scaffold extension directories and write boilerplate Java and XML templates.
Audit Metadata