Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/boxlogodev/sapstack/sap-bp-reviewgit clone --depth 1 https://github.com/BoxLogoDev/sapstackWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00038 | $0.00613 |
| Opus 5 | $0.00019 | $0.00307 |
| Sonnet 5 | $0.00008 | $0.00123 |
| Haiku 4.5 | $0.00004 | $0.00061 |
Grade A, and why
sap-bp-review scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
SAP Best Practice 준수 리뷰
입력: $ARGUMENTS
목표
사용자의 SAP 운영이 sapstack Best Practice 3-Tier 체계를 따르고 있는지 점검하고, 미준수 항목에 대해 구체적인 개선 방안을 제시합니다.
안전 규칙
- 조회/분석만 수행 — 변경은 사용자 확인 후
- 회사코드·조직 단위 값은 사용자가 제공
실행 절차
Step 1 — 환경 확인
- 대상 모듈 (FI, CO, MM, SD, PP, PM, QM 등)
- 리뷰 범위 (Operational / Period-End / Governance / All)
- SAP 릴리스 + 업종
Step 2 — Best Practice 로드
- 공통 BP:
docs/best-practices/문서 참조 - 모듈별 BP:
plugins/sap-{모듈}/references/best-practices/문서 참조 - 업종별 가이드:
docs/industry/참조 (해당 시)
Step 3 — 체크리스트 리뷰
각 Tier별 체크리스트를 사용자에게 제시하고 준수 여부 확인:
Tier 1 — Operational (일상 운영)
- 일간/주간 운영 체크리스트 항목별 준수 여부
- 표준 프로세스 준수 여부 (예: MIGO 전 이동유형 확인)
Tier 2 — Period-End (기간마감)
- 마감 전 Pre-flight 체크리스트
- 마감 실행 순서 준수 (모듈 횡단 의존성)
- 시뮬레이션 선행 여부
Tier 3 — Governance (거버넌스)
- 권한 관리 (SoD, K-SOX)
- 변경관리 프로세스
- 마스터데이터 거버넌스
- 감사 대비 상태
Step 4 — 개선 리포트
- 준수 항목 / 미준수 항목 분류
- 미준수 항목별 구체적 개선 방안
- 우선순위 (Critical / High / Medium / Low)
위임
- 모듈별 상세 → 해당 컨설턴트 에이전트
- 권한 관리 → sap-basis-consultant
- 한국 규제 → sap-bc 참조
참조
docs/best-practices/plugins/sap-{모듈}/skills/sap-{모듈}/references/best-practices/docs/enterprise/
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 61 lines · 38 tokens per session scan A 6d96aafb9e91
sap-bp-review is a command published in the GitHub repository BoxLogoDev/sapstack (18 stars, last pushed 3d ago), licensed MIT. It adds 38 tokens to every session and 613 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
eval-improve
Work the eval-loop corpus — rank failure clusters, fix the top actionable defect, validate against held-out, open a PR.
eval-run
Run an eval case end-to-end on the VM (implement → build → score → record → roll back). VM/full-mode only.
eval-author
Draft a new eval case (eval/cases/ .json) + scaffold its golden folder, goldenpending until captured on the VM.
ingest-l1
L1 analysis loop for the abapwiki knowledge base: for each batch it launches the abap-analyzer sub-agent in parallel, then the adversarial judge abap-deepcheck (separate session), applies only the analyses that pass the fail-closed gate, and commits. Resumes exactly after an interruption. Use this skill to document…
research-l2
Executes Phases 1-3 of the L2 process of the abapwiki knowledge base on a slice: launches the abap-functional-researcher sub-agent (gap discovery + multi-source auto-research: wiki -> raw/docs -> MCP abap-fs on the system read-only -> standard knowledge), ingests gaps and evidence, and generates questionnaires for…
ingest-l0
L0 bootstrap of the abapwiki knowledge base: creates stubs for all custom objects from the TADIR. Use this skill to initialize the repo from scratch or to ingest a new TADIR export. Deterministic operations (no LLM sub-agent), idempotent.