sap-fiori-url-generator

Fail

Audited by Socket on Mar 7, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with its stated purpose: it reads a local AppList.json, finds an app by name, extracts the Semantic Object - Action, and constructs a compliant FLP URL using user-provided BASE_URL and sap-client (with an optional language). It avoids privileged system access and external data flows beyond the generated URL. The risk is low and non-extractive, with minor concerns around input validation and data freshness of AppList.json, which are typical for a configuration-driven URL generator.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 7, 2026, 09:40 PM
Package URL
pkg:socket/skills-sh/likweitan%2Fabap-skills%2Fsap-fiori-url-generator%2F@e42cd17ede4060614bfe69b3e0d6c78c906a3bad