agentmods.dev

sap-abap-review

A command for reviewing SAP ABAP, the programming language used in many SAP systems. It finds the requested file or object, gathers related dependencies, and sends the code to a specialist review agent.

In plain words
What is it for?
Reviewing ABAP against Clean Core, HANA and S/4HANA practices, ATC priorities, authorization checks, and Korean privacy-law considerations.
Why use it?
It removes the need to manually collect includes, imports, and SAP data definitions before a review. It also organizes findings by severity and checks the listed SAP, performance, security, and privacy concerns.

Command

18 3d ago A scan 48 tokens original MIT
View the source file BoxLogoDev/sapstack
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/boxlogodev/sapstack/sap-abap-review
Clone the repo
git clone --depth 1 https://github.com/BoxLogoDev/sapstack
Per session 48 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 560 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00048 $0.00560
Opus 5 $0.00024 $0.00280
Sonnet 5 $0.00010 $0.00112
Haiku 4.5 $0.00005 $0.00056

Measured 3d ago against content hash c37d4fee0bf0, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

sap-abap-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

commands/sap-abap-review.md · 64 lines

What it actually says

ABAP 코드 리뷰

대상: $ARGUMENTS

실행 순서

  1. 파일 탐색

    • 인수가 경로면 Read로 로드
    • 인수가 객체명이면 Glob으로 검색 (**/*$ARGUMENTS*.abap, **/Z$ARGUMENTS*)
    • 여러 파일 매칭 시 사용자 확인

  2. 컨텍스트 수집

    • 관련 파일의 import/include 추적
    • DDIC 의존성 확인 (TABLES, TYPE, STRUCTURE)

  3. sap-abap-developer 서브에이전트에 위임

    • Task 도구로 sap-abap-developer 호출
    • 코드 전문 전달
    • 한국 현장 맥락(K-SOX, 개인정보보호법) 포함 요청

  4. 결과 통합

    • Critical 이슈는 즉시 표시
    • Warning은 우선순위 정렬
    • Good 항목도 인정

리뷰 범위

  • Clean Core 준수
  • HANA 성능 (SELECT, JOIN, FOR ALL ENTRIES)
  • S/4HANA 대응 (BP, ACDOCA, MATDOC)
  • ATC Priority 검증
  • 보안 (AUTHORITY-CHECK)
  • 한국 개인정보보호법 (민감정보 로그/출력)

출력 예시

## 📋 리뷰 대상
- 파일: Z_CUSTOM_REPORT.abap (324 라인)
- 관련: Z_CUSTOM_UTIL (include)

## 🔴 Critical (N건)
1. [Z_CUSTOM_REPORT:45] SELECT * FROM BSEG — S/4에서 ACDOCA로 변경 필요

## 🟡 Warning (N건)
1. [Z_CUSTOM_REPORT:120] FOR ALL ENTRIES에 empty check 누락

## 🟢 Good
- AUTHORITY-CHECK 패턴 올바름

## 📊 ATC 예상
- P1: N / P2: N / P3: N

참조

  • agents/sap-abap-developer.md
  • plugins/sap-abap/skills/sap-abap/references/clean-core-patterns.md
  • plugins/sap-abap/skills/sap-abap/references/code-review-checklist.md
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 64 lines · 48 tokens per session scan A c37d4fee0bf0

Subscribe to this mod's changes

sap-abap-review is a command published in the GitHub repository BoxLogoDev/sapstack (18 stars, last pushed 3d ago), licensed MIT. It adds 48 tokens to every session and 560 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Code reviewLanguagesabapai-agentsclaude-codedeveloper-toolserpllm-skills
Related

Other commands, from other repositories

abap-cloud-review

Review ABAP code for ABAP Cloud readiness, released API usage, syntax constraints, and upgrade-safe remediation steps.

secondsky/sap-skills · 27 tokens

validate_changed_docstrings

Validates Python docstrings in all uncommitted changed files using Sphinx parsing.

dagster-io/dagster · 0 tokens

rust-features

Get Rust version changelog and new features.

actionbook/actionbook · 0 tokens

cargo-miri

Command "cargo-miri" from olorehq/olore, covering cargo-miri(1), name, description and see also.

olorehq/olore · 0 tokens

fastapi

FastAPI application design and implementation conventions. Use this skill when building, updating, or reviewing FastAPI services, routers, dependencies, request/response schemas, streaming endpoints, or API tests. Trigger on FastAPI-specific work such as path operation design, dependency injection, response models…

mfmezger/ai_agent_dotfiles · 84 tokens

add-test-fixture-and-go-test-for-langgraph-js-rule

Workflow command scaffold for add-test-fixture-and-go-test-for-langgraph-js-rule in shingan.

hatyibei/shingan · 33 tokens