Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

SAP Integration Suite

v1.0.0

Integration and automation for SAP ABAP, HANA, and S/4HANA via data extraction, RFC/BAPI calls, API integration, ABAP code generation, and workflow automation.

0· 1k·3 current·3 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for highlander89/sap-integration.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "SAP Integration Suite" (highlander89/sap-integration) from ClawHub.
Skill page: https://clawhub.ai/highlander89/sap-integration
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install highlander89/sap-integration

ClawHub CLI

Package manager switcher

npx clawhub@latest install sap-integration
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Skill name, SKILL.md, and included Python scripts all describe SAP integration (RFC/BAPI/table extraction/HANA/S4 migration). The actual capabilities in the code (RFC_READ_TABLE, generic RFC calls, table extraction) align with the stated purpose.
Instruction Scope
Runtime instructions and scripts focus on SAP operations (data extraction, RFC calls). However SKILL.md references additional helper scripts (scripts/sap_report_generator.py and scripts/table_analyzer.py) that are NOT present in the file manifest — an inconsistency. The provided scripts will read arbitrary SAP tables and save results to disk, which is expected for this purpose but can access sensitive data; the instructions do not direct data to any external endpoints outside of local files.
Install Mechanism
There is no install spec (instruction-only), which minimizes automatic risk. However the Python code depends on pyrfc (and pandas/openpyxl) — pyrfc requires the SAP NW RFC SDK native libraries and specific build/setup steps. The skill provides no installation guidance for these native dependencies, which is an operational gap that may lead users to install libraries incorrectly or run into unexpected privileged build steps.
!
Credentials
The registry metadata declares no required environment variables or primary credential, but the scripts explicitly expect a JSON connection config with SAP credentials (ashost, sysnr, client, user, passwd). The absence of declared credential requirements is a mismatch: the skill will need sensitive SAP credentials to function but does not declare them in metadata. The credentials requested are appropriate for SAP integration, but users must be made aware they will provide high-privilege SAP access — principle of least privilege should be applied.
Persistence & Privilege
Skill does not request always:true, does not modify other skills, and has no install actions. It writes results to local files when asked (normal for a data extractor). Autonomous invocation is allowed (platform default) but is not combined with other red flags here.
What to consider before installing
This skill appears to be a genuine SAP integration tool, but review these before installing: - Missing files: SKILL.md lists additional scripts (sap_report_generator.py, table_analyzer.py) that are not included — ask the publisher why and request complete sources. - Credentials: The Python scripts expect a JSON config containing SAP credentials (ashost, sysnr, client, user, passwd). The registry metadata did not declare these credentials — assume you must provide sensitive SAP credentials. Only supply minimal-privilege technical users and test against a non-production system first. - Native dependencies: pyrfc requires SAP's NW RFC SDK and native build steps; the skill provides no install instructions. Don't attempt to install pyrfc without following official guidance from SAP and your security team. - Data sensitivity: The scripts can read arbitrary SAP tables (RFC_READ_TABLE) and save them locally. Confirm data-handling policies, encryption-at-rest, and audit logging before extraction. - Verify provenance: source/homepage is unknown. Prefer skills with a verifiable publisher and a hosted repository; if you must use this, request the publisher's contact, provenance, and a signed release. If you proceed, run the code in an isolated environment, limit SAP account privileges, and review the full source (including any missing files) before granting access to production systems.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ena26aexvyc3ffjmq8p9p1d80xff0
1kdownloads
0stars
1versions
Updated 22h ago
v1.0.0
MIT-0

SAP Integration Skill

Enterprise SAP system integration and automation capability built by SAPCONET experts.

Core Capabilities

Data Operations

  • Extract SAP data via RFC, BAPI, or OData services
  • Generate reports from SAP tables with proper joins and filters
  • Export to Excel/CSV with formatting and pivot analysis
  • Real-time data sync between SAP and external systems

Development Support

  • ABAP code generation for common patterns (ALV reports, BAPIs, enhancements)
  • SAP table analysis with field descriptions and relationships
  • Custom transaction creation with proper authorization checks
  • Performance optimization queries and recommendations

Integration Patterns

  • REST API wrappers for SAP functions
  • Middleware connectivity via PI/PO or CPI
  • Cloud integration with SAP Business Technology Platform
  • Legacy system bridging for modernization projects

Quick Start Examples

Data Extraction

" Extract customer master data
SELECT kunnr, name1, ort01, land1 
FROM kna1 
INTO TABLE lt_customers 
WHERE erdat >= sy-datum - 30.

BAPI Integration

# Python RFC connection
import pyrfc
conn = pyrfc.Connection(...)
result = conn.call('BAPI_CUSTOMER_GETDETAIL2', 
                  CUSTOMERNO='0000001000')

Advanced Workflows

SAP HANA Integration

For complex analytics and real-time processing:

S/4HANA Migration Support

For brownfield and greenfield transitions:

Custom Enhancement Framework

For user exits, BADIs, and enhancement spots:

Authentication & Security

All SAP connections require proper authentication:

  • Username/password for basic RFC
  • X.509 certificates for secure connections
  • OAuth 2.0 for cloud API access
  • SSO integration via SAML/Kerberos

Security best practices enforced:

  • Minimal authorization principle
  • Encrypted data transmission
  • Audit trail logging
  • No hardcoded credentials

Scripts Available

Execute common SAP operations without manual coding:

  • scripts/sap_data_extractor.py - Generic table data extraction
  • scripts/rfc_function_caller.py - Execute any RFC function module
  • scripts/sap_report_generator.py - Generate formatted Excel reports
  • scripts/table_analyzer.py - Analyze SAP table structure and relationships

Support Matrix

SAP ProductSupportedIntegration Method
SAP ECC 6.0+RFC, BAPI, IDoc
S/4HANA CloudOData, REST API
S/4HANA On-PremiseRFC, OData, BAPI
SAP BW/4HANAMDX, OData, RFC
SAP AribaREST API
SAP SuccessFactorsOData, SOAP
SAP ConcurREST API

Built with enterprise-grade reliability by SAPCONET - South Africa's leading SAP automation specialists.

Comments

Loading comments...