Install
$ agentstack add skill-babamba2-superclaude-for-sap-analyze-code ✓ scanned · ✓ verified — works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
About
SC4SAP Analyze Code
Reviews an ABAP object by delegating the heavy work (source read, structural/semantic/where-used analysis, 14-dimension rule matching) to sap-code-reviewer (Opus 4.7). The main thread only handles Socratic intake, report formatting, and the follow-up action menu — all on Haiku for cost efficiency.
sc4sap:analyze-code provides a comprehensive, severity-rated ABAP code review backed by the AST, semantic analysis, and where-used data that only the live SAP system can produce. The flow is deliberately thin on the main thread: the reviewer agent owns context-heavy work so the skill orchestrator stays light.
Every response triggered by this skill MUST begin with [Model: · Dispatched: ] per [../../common/model-routing-rule.md](../../common/model-routing-rule.md) § Response Prefix Convention.
Multi-phase skill. Before each Agent(...) dispatch, emit ▶ phase= () · agent= · model= per [../../common/model-routing-rule.md](../../common/model-routing-rule.md) § Phase Banner Convention.
Type B (Coder ↔ Consultant) teamMode activates between Step 2 (reviewer full review) and Step 3 (report) when reviewer's findings include a business-alignment dimension (§ 1 Business Purpose, § 2 Rule Faithfulness, § 13 Cross-Module Side-Effects) AND the object touches 2+ modules. Reviewer becomes Worker, module consultants become Peers; consultants live-validate the reviewer's business-alignment findings. See [team-mode.md](team-mode.md). Base protocol: [../../common/team-consultation-protocol.md](../../common/team-consultation-protocol.md) § Type B.
- User says "analyze", "review code", "check this class", "what's wrong with", "analyze code", or "code review"
- Before releasing a transport, to catch issues early
- When taking over existing ABAP code and wanting to understand its quality
- When optimizing performance of an ABAP program or class
- User wants where-used impact analysis before modifying an object
- User wants to modify the code immediately →
/sc4sap:create-program(full program flows) or directUpdateClass/UpdateProgram/UpdateIncludeMCP calls - Object doesn't exist yet →
/sc4sap:create-object - User just wants to read the source →
ReadClass,ReadProgrametc. directly
MANDATORY — runs as Step 0 before any MCP call or user interaction.
Invoke /sc4sap:trust-session with parent_skill=sc4sap:analyze-code to pre-grant all MCP tool + file-op permissions for this session (eliminates per-tool "Allow this tool?" prompts during the review flow).
- If
.sc4sap/session-trust.logalready has a line within the last 24h, skip silently. - Otherwise run it and surface the one-line confirmation.
- All subsequent
Agentdispatches within this skill MUST passmode: "dontAsk".
Full spec: see [../trust-session/SKILL.md](../trust-session/SKILL.md).
MANDATORY: Read the companion files below before executing.
| Companion | Scope | |-----------|-------| | [analysis-dimensions.md](analysis-dimensions.md) | 9 common/ rule files that the reviewer agent (not main) loads + 14 evaluation dimensions | | [workflow.md](workflow.md) | 4-step execution flow: Identify → Review (delegated) → Report (branching) → Actions | | [output-and-tools.md](output-and-tools.md) | Report output format + MCP tool list used by the reviewer agent |
Orchestration is 1 main-thread Socratic intake + one delegated dispatch to sap-code-reviewer + a branching report + main-thread action menu.
- Step 1 (main · Haiku) — Identify: ask for (or confirm) the ABAP object name + type; verify via
SearchObject. - Step 2 (delegated · Opus 4.7) — Dispatch to
sap-code-reviewerwith only the object reference. The reviewer agent itself reads source (viaGetClass/GetProgram/GetProgFullCode/...), runs structural analysis (GetAbapAST+GetAbapSemanticAnalysis+GetWhereUsed), loads the 9common/rule files, and evaluates all 14 dimensions. Returns: findings list (severity · location · rule ref · fix suggestion) + summary metrics. - Step 3 (branching):
- Branch A — canned (default: no Critical findings AND
Task: {{ARGUMENTS}}
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: babamba2
- Source: babamba2/superclaude-for-sap
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet — be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.