ClawHub
Back to skill

Security audit

SAP FICO Senior Consultant

Security checks across malware telemetry and agentic risk

Overview

This SAP accounting help skill is a prompt-and-reference pack with no hidden code; its main caveats are broad auto-triggering and French responses.

Install this if you want an SAP FI/CO-focused assistant and are comfortable with automatic SAP keyword activation and French-format answers. For production SAP configuration, migration, accounting, or OSS/KBA advice, verify recommendations against official SAP documentation and authorized SAP staff before making changes.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The skill is configured to auto-activate on a very broad set of SAP-related keywords, including common terms like 'SAP', 'S/4HANA', table names, and transaction codes. In a multi-skill bot, this can cause unintended routing, prompt injection of the SAP persona into unrelated conversations, and reduced user control over when the specialized system prompt is applied.

Vague Triggers

Low
Confidence
78% confidence
Finding
The documentation says the skill activates automatically when a message contains an SAP keyword, but it does not define boundaries, exclusions, or negative examples. This ambiguity increases the chance of accidental invocation and misapplication of the skill's system prompt, especially in mixed-topic chats or environments with overlapping enterprise skills.

Natural-Language Policy Violations

Medium
Confidence
84% confidence
Finding
The skill specifies 'French technical SAP terminology' as a fixed language behavior without indicating user choice or negotiation. This can produce inaccessible or misleading responses for users expecting another language, and in operational contexts may increase the risk of misunderstanding configuration or troubleshooting guidance.

Natural-Language Policy Violations

Medium
Confidence
82% confidence
Finding
The quality criteria require responses in French technical SAP terminology, again without opt-in or justification for a hard locale restriction. For a support skill, mandated language output can cause interpretation errors, lower usability, and unsafe execution of business-critical instructions by non-French-speaking users.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.