btp-diagram-generator— agent skill

btp-diagram-generator — independently scanned and version-tracked by SaferSkills.

by likweitan·Agent Skill·github.com/likweitan/abap-skills

Is btp-diagram-generator safe to install?

SaferSkills independently audited btp-diagram-generator (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 102 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

Score
45/100
●●●●●○○○○○
↑ +0 since first scan (45 → 45)Re-scan~30s
Latest scan
ScannedJun 27, 2026 · 31d ago
Scans run1 over 90 days
Detectors55 checks · 5 categories
Findings0 warnings · 102 high
EngineSaferSkills 2b638c6
View methodology →
SaferSkills installs
This week0
This month0
All time0
CategoryWeightCategory scoreContribution
Securityprompt, exec, net, exfil, eval
35%
0
0.0 pts
Supply chainhash, typosquat, maintainer, lockfile
20%
100
20.0 pts
Maintenancestaleness, pinning, CI
15%
100
15.0 pts
TransparencySKILL.md, perms, README
15%
100
15.0 pts
Communityinstalls, verify, response
15%
100
15.0 pts

Findings & checks · 102 flagged

Securityscore 0 · 102 findings
HIGHLong base64-encoded blob hidden in the skill documentationSS-SKILL-INJECT-B64-PAYLOAD-01 · Prompt injection · skills/btp-diagram-generator/reference/icon-index.json×102
HIGHonce decoded by the agent, an encoded payload has the same impact class as plain-text injection.
Why it matters

A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.

The exact value spotted
excerptskills/btp-diagram-generator/reference/icon-index.json· json
7},
8"10002-cloud-integration-automation_sd": {
9"style": "shape=image;verticalLabelPosition=bottom;verticalAlign=top;imageAspect=0;aspect=fi
… (104 chars elided on L9)
10"width": 32,
11"height": 32
Occurrences
102 occurrences · first at L9, also L14, L19 +99 more
Show all 102 locations
Line
File
L9
skills/btp-diagram-generator/reference/icon-index.json
L14
skills/btp-diagram-generator/reference/icon-index.json
L19
skills/btp-diagram-generator/reference/icon-index.json
L24
skills/btp-diagram-generator/reference/icon-index.json
L29
skills/btp-diagram-generator/reference/icon-index.json
L34
skills/btp-diagram-generator/reference/icon-index.json
L39
skills/btp-diagram-generator/reference/icon-index.json
L44
skills/btp-diagram-generator/reference/icon-index.json
L49
skills/btp-diagram-generator/reference/icon-index.json
L54
skills/btp-diagram-generator/reference/icon-index.json
L59
skills/btp-diagram-generator/reference/icon-index.json
L64
skills/btp-diagram-generator/reference/icon-index.json
L69
skills/btp-diagram-generator/reference/icon-index.json
L74
skills/btp-diagram-generator/reference/icon-index.json
L79
skills/btp-diagram-generator/reference/icon-index.json
L84
skills/btp-diagram-generator/reference/icon-index.json
L89
skills/btp-diagram-generator/reference/icon-index.json
L94
skills/btp-diagram-generator/reference/icon-index.json
L99
skills/btp-diagram-generator/reference/icon-index.json
L104
skills/btp-diagram-generator/reference/icon-index.json
L109
skills/btp-diagram-generator/reference/icon-index.json
L114
skills/btp-diagram-generator/reference/icon-index.json
L119
skills/btp-diagram-generator/reference/icon-index.json
L124
skills/btp-diagram-generator/reference/icon-index.json
L129
skills/btp-diagram-generator/reference/icon-index.json
L134
skills/btp-diagram-generator/reference/icon-index.json
L139
skills/btp-diagram-generator/reference/icon-index.json
L144
skills/btp-diagram-generator/reference/icon-index.json
L149
skills/btp-diagram-generator/reference/icon-index.json
L154
skills/btp-diagram-generator/reference/icon-index.json
L159
skills/btp-diagram-generator/reference/icon-index.json
L164
skills/btp-diagram-generator/reference/icon-index.json
L169
skills/btp-diagram-generator/reference/icon-index.json
L174
skills/btp-diagram-generator/reference/icon-index.json
L179
skills/btp-diagram-generator/reference/icon-index.json
L184
skills/btp-diagram-generator/reference/icon-index.json
L189
skills/btp-diagram-generator/reference/icon-index.json
L194
skills/btp-diagram-generator/reference/icon-index.json
L199
skills/btp-diagram-generator/reference/icon-index.json
L204
skills/btp-diagram-generator/reference/icon-index.json
L209
skills/btp-diagram-generator/reference/icon-index.json
L214
skills/btp-diagram-generator/reference/icon-index.json
L219
skills/btp-diagram-generator/reference/icon-index.json
L224
skills/btp-diagram-generator/reference/icon-index.json
L229
skills/btp-diagram-generator/reference/icon-index.json
L234
skills/btp-diagram-generator/reference/icon-index.json
L239
skills/btp-diagram-generator/reference/icon-index.json
L244
skills/btp-diagram-generator/reference/icon-index.json
L249
skills/btp-diagram-generator/reference/icon-index.json
L254
skills/btp-diagram-generator/reference/icon-index.json
L259
skills/btp-diagram-generator/reference/icon-index.json
L264
skills/btp-diagram-generator/reference/icon-index.json
L269
skills/btp-diagram-generator/reference/icon-index.json
L274
skills/btp-diagram-generator/reference/icon-index.json
L279
skills/btp-diagram-generator/reference/icon-index.json
L284
skills/btp-diagram-generator/reference/icon-index.json
L289
skills/btp-diagram-generator/reference/icon-index.json
L294
skills/btp-diagram-generator/reference/icon-index.json
L299
skills/btp-diagram-generator/reference/icon-index.json
L304
skills/btp-diagram-generator/reference/icon-index.json
L309
skills/btp-diagram-generator/reference/icon-index.json
L314
skills/btp-diagram-generator/reference/icon-index.json
L319
skills/btp-diagram-generator/reference/icon-index.json
L324
skills/btp-diagram-generator/reference/icon-index.json
L329
skills/btp-diagram-generator/reference/icon-index.json
L334
skills/btp-diagram-generator/reference/icon-index.json
L339
skills/btp-diagram-generator/reference/icon-index.json
L344
skills/btp-diagram-generator/reference/icon-index.json
L349
skills/btp-diagram-generator/reference/icon-index.json
L354
skills/btp-diagram-generator/reference/icon-index.json
L359
skills/btp-diagram-generator/reference/icon-index.json
L364
skills/btp-diagram-generator/reference/icon-index.json
L369
skills/btp-diagram-generator/reference/icon-index.json
L374
skills/btp-diagram-generator/reference/icon-index.json
L379
skills/btp-diagram-generator/reference/icon-index.json
L384
skills/btp-diagram-generator/reference/icon-index.json
L389
skills/btp-diagram-generator/reference/icon-index.json
L394
skills/btp-diagram-generator/reference/icon-index.json
L399
skills/btp-diagram-generator/reference/icon-index.json
L404
skills/btp-diagram-generator/reference/icon-index.json
L409
skills/btp-diagram-generator/reference/icon-index.json
L414
skills/btp-diagram-generator/reference/icon-index.json
L419
skills/btp-diagram-generator/reference/icon-index.json
L424
skills/btp-diagram-generator/reference/icon-index.json
L429
skills/btp-diagram-generator/reference/icon-index.json
L434
skills/btp-diagram-generator/reference/icon-index.json
L439
skills/btp-diagram-generator/reference/icon-index.json
L444
skills/btp-diagram-generator/reference/icon-index.json
L449
skills/btp-diagram-generator/reference/icon-index.json
L454
skills/btp-diagram-generator/reference/icon-index.json
L459
skills/btp-diagram-generator/reference/icon-index.json
L464
skills/btp-diagram-generator/reference/icon-index.json
L469
skills/btp-diagram-generator/reference/icon-index.json
L474
skills/btp-diagram-generator/reference/icon-index.json
L479
skills/btp-diagram-generator/reference/icon-index.json
L484
skills/btp-diagram-generator/reference/icon-index.json
L489
skills/btp-diagram-generator/reference/icon-index.json
L499
skills/btp-diagram-generator/reference/icon-index.json
L504
skills/btp-diagram-generator/reference/icon-index.json
L509
skills/btp-diagram-generator/reference/icon-index.json
L514
skills/btp-diagram-generator/reference/icon-index.json
L519
skills/btp-diagram-generator/reference/icon-index.json
How to fix
Remove the encoded blob, or decode it and review what it actually contains.
  1. Decode the base64 string and confirm it is not an instruction directed at the agent.
  2. Move any legitimate binary or signature data into a dedicated file (*.sig, SIGNATURES) outside the documentation.
Framework references
OWASPLLM01ATLASAML.T0051
Trace & refs
ruleSS-SKILL-INJECT-B64-PAYLOAD-01sha256489b5266d0845256rubric 365aacaView on GitHub
Supply chainscore 100 · 0 findings
All supply chain checks passedNo findings in this category for the latest scan.pass
Maintenancescore 100 · 0 findings
All maintenance checks passedNo findings in this category for the latest scan.pass
Transparencyscore 100 · 0 findings
All transparency checks passedNo findings in this category for the latest scan.pass
Communityscore 100 · 0 findings
All community checks passedNo findings in this category for the latest scan.pass
Vendor response · right of reply
Are you the maintainer? Submit a response →

Audit the pieces. Scan the whole. Decide.

~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.