github JavaScript analyzed ba8a2a2

secondsky/sap-skills

Production-ready plugins for SAP development with AI coding assistants — BTP, CAP, Fiori, ABAP, HANA, Analytics Cloud, Datasphere, and more

maintainer: secondsky
licence: GPL-3.0
first seen: 2026-06-01
last seen: 2026-09-17
releases · 30d: 0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit ba8a2a2 · analyzer v33 · 1d ago

skills & prompt files 40

danger signals1

committed secret Stripe live key secondsky-sap-skills-ba8a2a2/plugins/sap-api-style/skills/sap-api-style/references/quality-processes.md :1491 sk_liv…(32 chars, redacted)

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 144

filesystem 50

fs (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/cdp-agent.mjs :3 import { mkdir, readFile, writeFile } from 'node:fs/promises';
fs (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/tests/edge-cdp.integration.test.mjs :4 import { mkdir, mkdtemp, readFile, rm, stat, writeFile } from 'node:fs/promises';
fs (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/tests/edge-profile.test.mjs :3 import { access, mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
fs (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/tests/skill-contract.test.mjs :2 import { readFile } from 'node:fs/promises';
fs secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/bundle/sign-bundle.mjs :2 import fs from "node:fs";
fs secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/build.mjs :1 import fs from "node:fs";
fs secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/connection-store.mjs :1 import fs from "node:fs";
fs secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/draft-state.mjs :2 import fs from "node:fs";
fs secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/server.mjs :1 import fs from "node:fs";
fs secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/step-store.mjs :1 import fs from "node:fs";
fs secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/tool-handlers.mjs :1 import fs from "node:fs";
fs secondsky-sap-skills-ba8a2a2/plugins/sap-sac-custom-widget/skills/sap-sac-custom-widget/templates/local-builder/server.mjs :2 import fs from "node:fs";

show 28 more

fs secondsky-sap-skills-ba8a2a2/plugins/sapui5-cli/skills/sapui5-cli/templates/custom-middleware-template.js :207 const fs = require("fs");
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/audit-effectiveness.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/audit-mcp-freshness.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/generate-codex-layer.mjs :3 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/lib/validation-utils.mjs :1 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/smoke-local-fixtures.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/test-hook-contracts.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/test-hooks.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/test-lsp-launcher.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-bundled-resources.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-codex-layer.mjs :3 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-command-agent-frontmatter.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-harness-portability.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-manifest-drift.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-mcp-env-contracts.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-mcp-security.mjs :2 import { readdirSync, readFileSync, statSync } from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-oracle-browser-safety.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-packaging-hygiene.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-public-claims.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-reference-provenance.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-skill-quality.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-templates.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-verification-ledger.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/tests/codex-layer.test.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/api-map-contract.test.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/bridge-runtime.test.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/bundle-build.test.mjs :2 import fs from "node:fs";
fs (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/connection-runtime.test.mjs :2 import fs from "node:fs";

10 more not shown — this panel samples each group; the count above is the real total.

shell / exec 15

shell (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/tests/edge-cdp.integration.test.mjs :2 import { execFile } from 'node:child_process';
shell (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/tests/edge-profile.test.mjs :2 import { execFile } from 'node:child_process';
shell secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/build.mjs :3 import { spawnSync } from "node:child_process";
shell secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/studio-service.mjs :2 import { spawn } from "node:child_process";
shell secondsky-sap-skills-ba8a2a2/plugins/sap-cap-capire/lsp/cds-lsp-launcher.mjs :2 import { spawn } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/scripts/audit-mcp-freshness.mjs :4 import { execFileSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/scripts/smoke-local-fixtures.mjs :5 import { spawnSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/scripts/test-hook-contracts.mjs :4 import { spawnSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/scripts/test-hooks.mjs :4 import { spawnSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/scripts/test-lsp-launcher.mjs :5 import { spawnSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-manifest-drift.mjs :5 import { spawnSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-templates.mjs :6 import { spawnSync } from "node:child_process";

show 3 more

shell (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/deployer-contract.test.mjs :7 import { spawnSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/provenance.test.mjs :5 import { spawnSync } from "node:child_process";
shell (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/windows-validator-regression.test.mjs :5 import { spawnSync } from "node:child_process";

network 9

net (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/cdp-agent.mjs :300 const response = await fetch(`${baseUrl}/json/version`);
net (weak) secondsky-sap-skills-ba8a2a2/plugins/sap-browser-automation/skills/sap-browser-automation/scripts/tests/edge-cdp.integration.test.mjs :3 import { createServer } from 'node:http';
net secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/bridge-broker.mjs :2 import net from "node:net";
net secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/connection-store.mjs :2 import net from "node:net";
net secondsky-sap-skills-ba8a2a2/plugins/sap-sac-custom-widget/skills/sap-sac-custom-widget/templates/design-runtime/runtime.js :88 return fetch("./design-runtime.json", { cache: "no-store" })
net secondsky-sap-skills-ba8a2a2/plugins/sap-sac-custom-widget/skills/sap-sac-custom-widget/templates/local-builder/server.mjs :3 import http from "node:http";
net (weak) secondsky-sap-skills-ba8a2a2/scripts/validate-templates.mjs :3 import http from "node:http";
net (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/bridge-runtime.test.mjs :3 import net from "node:net";
net (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/connection-runtime.test.mjs :3 import net from "node:net";

secrets 2

secrets secondsky-sap-skills-ba8a2a2/plugins/sap-bw-query/mcp/src/bridge-broker.mjs :62 const inherited = process.env.BW_AUTOMATION_BRIDGE_TOKEN;
secrets (weak) secondsky-sap-skills-ba8a2a2/tests/sap-bw-query/bridge-runtime.test.mjs :65 const savedEnv = process.env.BW_AUTOMATION_BRIDGE_TOKEN;

declared dependencies 3

@steipete/oracle@0.18.0
ajv-cli@^5.0.0
ajv-formats@^3.0.1