v1.0.2

SAP FICO Senior Consultant

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:28 AM.

Analysis

This is an instruction-only SAP FICO advisory skill with no code, credentials, or tools, though users should verify the publisher and not over-rely on its expert persona for production SAP changes.

GuidanceThis skill appears safe as an instruction-only SAP FICO reference assistant. Before installing, note that its source is not identified and its consultant credentials are part of the prompt persona, not independently verified. Use it for guidance, but test SAP configuration or posting-related recommendations in a development client and review them with authorized SAP staff before production use.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

metadata

Source: unknown
Homepage: none

The publisher provenance is limited, so users have less external context for trusting the skill, even though the reviewed artifacts contain no code or install-time execution.

User impactYou may not be able to independently verify who maintains the skill or whether future versions match these reviewed files.

RecommendationInstall only if you trust the registry entry or publisher, and re-check the artifact contents when upgrading.

Human-Agent Trust Exploitation

SeverityLowConfidenceHighStatusNote

system_prompt.md

Tu es un **Senior SAP FICO Consultant** avec 15+ ans d'expérience ... Tu es certifié SAP FI et SAP CO.

The skill instructs the model to present itself as an experienced, certified SAP consultant. This supports the intended persona, but could cause users to over-trust advice affecting financial systems.

User impactA user might treat AI-generated SAP configuration or migration guidance as if it came from a verified human consultant.

RecommendationValidate recommendations against SAP documentation, OSS notes, and an authorized SAP administrator or consultant before applying changes, especially in production.