sap-fiori-url-generator
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill's footprint is coherent with its stated purpose: it reads a local AppList.json, finds an app by name, extracts the Semantic Object - Action, and constructs a compliant FLP URL using user-provided BASE_URL and sap-client (with an optional language). It avoids privileged system access and external data flows beyond the generated URL. The risk is low and non-extractive, with minor concerns around input validation and data freshness of AppList.json, which are typical for a configuration-driven URL generator.
Confidence: 98%
Audit Metadata