skills.rest
sapdev-ai
sapdev-aiOFFICIAL
Explore all skills by this author →
GitHub

sap-review-abap

Analyze ABAP sources for security and correctness findings.

7|1|Updated May 11, 2026
Search Tags:#security#evidence#static-analysis#code-review#read-only#abap
One-click install
npx skills add https://github.com/sapdev-ai/sap-dev --skill sap-review-abap
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sap-review-abap
Source: https://github.com/sapdev-ai/sap-dev/tree/main/plugins/sap-gen-code/skills/sap-review-abap
Command: npx skills add https://github.com/sapdev-ai/sap-dev --skill sap-review-abap

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Semantic, security-aware ABAP code review that reads existing ABAP sources to surface actionable findings without modifying.

Core Features & Use Cases

  • Read-active-source analysis: reads active ABAP sources (programs, includes, RFCs) and GUI-downloaded classes to build a reliable map.
  • Dimensioned reasoning: analyzes security, correctness, performance, robustness, and maintainability across the code.
  • Evidence-backed findings: cites exact lines and excerpts, exports results as review.tsv/json and registers for evidence packs.
  • Read-only safeguard: never deploys or edits production code; suitable for audits.

Quick Start

Review the target ABAP object or .abap file in read-only mode and emit a structured, evidence-backed set of findings.

Frequently Asked Questions about sap-review-abap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I perform a security-aware ABAP code review without modifying production code?▼

Analyze active ABAP sources in read-only mode to surface security, correctness, and robustness findings without modifying production code. The review cites exact lines and exports structured results for auditability.

What does semantic static analysis of ABAP code cover?▼

Semantic ABAP analysis covers security, correctness, performance, robustness, and maintainability dimensions. It reads active sources including GUI-downloaded classes and RFCs to produce evidence-backed findings.

Do I need an SAP login to run static analysis on ABAP sources?▼

Yes, a pinned SAP login with read-only access is required to analyze active ABAP sources. This ensures secure extraction of programs, includes, and RFCs for generating structured review findings.

How do I export ABAP code review results with evidence for audits?▼

Export ABAP review results as review.tsv or review.json files containing cited line numbers and code excerpts. These evidence-backed artifacts support audit and maintenance workflows directly.

Can I use static analysis on GUI-downloaded ABAP classes and RFC sources?▼

Yes, static analysis supports GUI-downloaded ABAP classes and RFC-based sources. The tool reads these active sources to evaluate security, correctness, and maintainability, producing structured findings.

What are the limitations of read-only ABAP code review?▼

Read-only ABAP code review never deploys or edits production code, limiting its function to surfacing findings without applying fixes. It requires a pinned SAP login and focuses solely on generating audit-ready review artifacts.

Related Skills

Explore More Software Engineering Skills→
sapdev-aisapdev-ai
7

sap-se38

Automate ABAP program deployment to SAP SE38 via GUI scripting.

Official
Advanced
nksethnkseth

security-reviewer

Identify security vulnerabilities in code and infrastructure and deliver prioritized audit reports with remediation guidance.

Community
Advanced
vigneshbarani24vigneshbarani24
6

system-administration

Guide SAP Basis administration tasks across DEV/QAS/PRD landscapes.

Community
Advanced
arc-mcparc-mcp
156

sap-unused-code

Analyze SCMON usage data and static where-used analysis to classify SAP ABAP custom code.

Official
Advanced