sap-sqlscript
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide and template library for SAP SQLScript development. All instructional content is aligned with standard industry practices for SAP HANA programming.
- [SAFE]: All external documentation links and resource URLs target official SAP platforms (help.sap.com, developers.sap.com) or trusted community repositories (github.com/SAP-samples), adhering to the trusted organization rules.
- [SAFE]: The provided SQL and ABAP templates for procedures, functions, and AMDP classes are production-ready and do not contain hardcoded credentials, suspicious network calls, or unauthorized system access.
- [PROMPT_INJECTION]: Indirect prompt injection surface identified (Category 8). 1. Ingestion points: User-provided SQLScript and ABAP code analyzed by agents like sqlscript-analyzer and procedure-generator. 2. Boundary markers: The documentation does not specify the use of delimiters or instructions to ignore embedded commands within user code. 3. Capability inventory: Commands such as /sqlscript-validate and /sqlscript-optimize include auto-fix capabilities, implying file-write access. 4. Sanitization: While the skill explicitly teaches users how to prevent SQL injection in database procedures, its internal handling of untrusted user input is not detailed. This surface is considered a common characteristic of development-assistance skills and is internally assessed as safe.
Audit Metadata