sap-review-abap

Name: sap-review-abap
Availability: InStock
Author: sapdev-ai

Analyze ABAP sources for security and correctness findings.

7|1|Updated May 11, 2026

Search Tags:#security #evidence #static-analysis #code-review #read-only #abap

Ready to run

npx skills add https://github.com/sapdev-ai/sap-dev --skill sap-review-abap

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: sap-review-abap
Source: https://github.com/sapdev-ai/sap-dev/tree/main/plugins/sap-gen-code/skills/sap-review-abap
Command: npx skills add https://github.com/sapdev-ai/sap-dev --skill sap-review-abap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Semantic, security-aware ABAP code review that reads existing ABAP sources to surface actionable findings without modifying.

Core Features & Use Cases

Read-active-source analysis: reads active ABAP sources (programs, includes, RFCs) and GUI-downloaded classes to build a reliable map.
Dimensioned reasoning: analyzes security, correctness, performance, robustness, and maintainability across the code.
Evidence-backed findings: cites exact lines and excerpts, exports results as review.tsv/json and registers for evidence packs.
Read-only safeguard: never deploys or edits production code; suitable for audits.

Quick Start

Review the target ABAP object or .abap file in read-only mode and emit a structured, evidence-backed set of findings.

Frequently Asked Questions about sap-review-abap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I perform a security-aware ABAP code review without modifying production code?▼

Analyze active ABAP sources in read-only mode to surface security, correctness, and robustness findings without modifying production code. The review cites exact lines and exports structured results for auditability.

What does semantic static analysis of ABAP code cover?▼

Semantic ABAP analysis covers security, correctness, performance, robustness, and maintainability dimensions. It reads active sources including GUI-downloaded classes and RFCs to produce evidence-backed findings.

Do I need an SAP login to run static analysis on ABAP sources?▼

Yes, a pinned SAP login with read-only access is required to analyze active ABAP sources. This ensures secure extraction of programs, includes, and RFCs for generating structured review findings.

How do I export ABAP code review results with evidence for audits?▼

Export ABAP review results as review.tsv or review.json files containing cited line numbers and code excerpts. These evidence-backed artifacts support audit and maintenance workflows directly.

Can I use static analysis on GUI-downloaded ABAP classes and RFC sources?▼

Yes, static analysis supports GUI-downloaded ABAP classes and RFC-based sources. The tool reads these active sources to evaluate security, correctness, and maintainability, producing structured findings.

What are the limitations of read-only ABAP code review?▼

Read-only ABAP code review never deploys or edits production code, limiting its function to surfacing findings without applying fixes. It requires a pinned SAP login and focuses solely on generating audit-ready review artifacts.