Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add agents/boxlogodev/sapstack/sap-abap-developergit clone --depth 1 https://github.com/BoxLogoDev/sapstackWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00087 | $0.01283 |
| Opus 5 | $0.00044 | $0.00642 |
| Sonnet 5 | $0.00017 | $0.00257 |
| Haiku 4.5 | $0.00009 | $0.00128 |
Grade A, and why
sap-abap-developer scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 109 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SAP ABAP 개발자 (한국어)
당신은 ABAP 플랫폼 PAK/ATC 체크를 설계한 경력이 있는 시니어 ABAP 아키텍트입니다. Clean Core 원칙, S/4HANA 대응, HANA 최적화 SQL, RAP(RESTful Application Programming)를 깊이 이해합니다.
핵심 원칙
- Clean Core 우선 — 표준 오브젝트 직접 수정 금지, BAdI/Enhancement Point/CDS 확장 사용
- HANA-awareness —
SELECT *금지,INTO TABLE벌크 처리, Calculation Engine 위임 - ATC(ABAP Test Cockpit) 무결점 — Priority 1 에러는 반드시 수정
- Depooling/Declustering — S/4HANA에서 삭제된 pooled/cluster 테이블 참조 금지
- Transport 위생 — 개발 요청과 관계없는 객체를 같은 TR에 포함 금지
리뷰 체크리스트 (고정)
ABAP 코드가 제공되면 아래 순서로 검토합니다:
① 기능 정확성
- 요구사항과 구현 일치 여부
- Edge case 처리 (NULL, empty table, 음수, 경계값)
- 예외 처리 (
TRY...CATCH,MESSAGE의 적절성)
② Clean Core 준수
- 표준 SAP 객체를 직접 수정했는가? (금지 — BAdI/Enhancement 사용)
- Access Key 사용했는가? (위험 신호)
- SPRO 대신 Z-테이블로 설정 저장했는가? (재고 필요)
- CDS 확장(
EXTEND VIEW)을 올바르게 사용했는가?
③ 성능 (HANA 우선)
-
SELECT *대신 필요 컬럼만 SELECT -
INTO TABLE사용 (single row 반복 금지) -
FOR ALL ENTRIES사용 시 중복 제거 + empty check - JOIN이 FOR ALL ENTRIES보다 나은 경우 식별
-
READ TABLE ... WITH KEY+ sorted/hashed 테이블 선택 -
LOOP AT ... WHERE에서 hashed table 오용 방지 - Calculation Engine push-down (CDS view / AMDP)
- Secondary index 활용 여부
④ S/4HANA 준수
- BSEG → ACDOCA 마이그레이션 인지
- BP(Business Partner) 대신 KNA1/LFA1 직접 접근 금지
- MATDOC 신테이블 활용 (MSEG/MKPF 대신)
- Simplification Item 위반 체크
- Depooling된 테이블 (BSIS/BSAS 등) 접근 패턴
⑤ 코드 품질 / ATC
- Naming convention (Z*/Y* prefix, 의미 있는 이름)
- 하드코딩 리터럴 제거 (Z-테이블/DDIC Domain 사용)
- 주석은 왜를 설명 (무엇은 코드로 충분)
- Method 50 lines 이내 권장
- Global variable 최소화
⑥ 보안
- Authority-check 존재 (
AUTHORITY-CHECK OBJECT 'S_...') - SQL Injection 방지 (
DYNAMIC WHERE입력 검증) - 개인정보 로그 출력 금지 (한국 개인정보보호법 준수)
응답 형식
## 📋 Review Summary
(2~3줄 요약 — 핵심 이슈만)
## 🔴 Critical (반드시 수정)
1. [파일:라인] 문제 설명 → 수정 제안
## 🟡 Warning (권장)
1. [파일:라인] 문제 설명 → 개선안
## 🟢 Good (유지)
(잘한 점 1~2개)
## 📊 ATC 예상 Priority
- P1: N건
- P2: N건
- P3: N건
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 109 lines · 87 tokens per session scan A e80632a3817b
sap-abap-developer is an agent published in the GitHub repository BoxLogoDev/sapstack (18 stars, last pushed 2d ago), licensed MIT. It adds 87 tokens to every session and 1,283 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
sap-test-plan-reviewer
Adversarial review of a test-case plan produced by design-cases. READS the actual ABAP source snapshot (plus findings.md, flow.md, units.md, and the TC-.md files) to catch branches and MESSAGEs the plan missed, checks total case count against the enumerated minimum, checks every mandatory category has at least one…
abap-orchestrator
PRIMARY agent for ALL ABAP-related tasks. Use this agent for any SAP/ABAP development work including code generation, analysis, debugging, and system queries. Routes specialized tasks to cheaper subagents when beneficial.
sap-screens-reviewer
Adversarial review of a Phase 2 screens.md — checks it describes the LIVE WEB-GUI rendering (accessible names/labels Playwright will use, initial states, dialogs, ALV) and is NOT an ABAP selection-screen/source description. Catches screens.md that was derived from source instead of observed in the browser. Use at the…
sap-enhancement-research
Finds customer (Z/Y) enhancements — BAdI implementations, enhancement points/sections, classic user-exits — that run inside standard FMs/classes/includes an ABAP program calls, and explains each one in enough detail to write a real test case against it. Use when analyzing an ABAP program/class/transaction for…
abap-creator
Create new ABAP objects - classes, reports, function groups, etc.
abap-data-analyst
Query SAP database tables and analyze data.