Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/BoxLogoDev/sapstackWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/boxlogodev/sapstack/sap-session-start)<a href="https://agentmods.dev/commands/boxlogodev/sapstack/sap-session-start"><img src="https://agentmods.dev/badge/commands/boxlogodev/sapstack/sap-session-start/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/boxlogodev/sapstack/sap-session-start"><img src="https://agentmods.dev/badge/commands/boxlogodev/sapstack/sap-session-start.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00040 | $0.01857 |
| Opus 5.5 | $0.00016 | $0.00743 |
| Sonnet 5.5 | $0.00008 | $0.00371 |
| Haiku 4.5 | $0.00004 | $0.00186 |
Grade A, and why
sap-session-start scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 161 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/sap-session-start — 새 Evidence Loop 세션 시작
입력: $ARGUMENTS
이 커맨드는 Evidence Loop의 Turn 1 INTAKE를 수행합니다. 라이브 SAP 접근 없이 운영자가 가져온 증거를 기반으로 진단을 시작하는 엔트리 포인트입니다.
🧭 동작 단계
1. 인자 파싱
- 포지셔널 인자: 증상 설명 (최대 2000자). 자유 텍스트.
- 옵션 플래그:
--country {iso}— ISO 3166-1 alpha-2 (kr, de, us, jp, ...).config.yaml에 기본값 있으면 생략 가능.--release {code}— ECC6_EhP7, S4_2022 등. 스키마의 enum 참조.--deployment {on_premise|private_cloud|public_cloud}--language {ko|en|...}— 세션 전체 언어--intake-files <path>...— 초기 Evidence Bundle 파일들 (선택적)--reporter-role {end_user|operator|consultant}
2. 세션 ID 생성
sess-{YYYYMMDD}-{6자리 영숫자}
예: sess-20260412-m2p9xt
3. 파일 시스템 준비
.sapstack/sessions/{session_id}/
├── state.yaml ← 새로 생성
├── bundles/ ← 빈 디렉토리
├── hypotheses/ ← 빈 디렉토리
├── requests/ ← 빈 디렉토리
├── verdicts/ ← 빈 디렉토리
└── files/ ← 빈 디렉토리
4. state.yaml 초기화
schemas/session-state.schema.yaml에 따라 다음 필드를 채워 새 파일 작성:
session_id,schema_version: "1.0.0",created_at,last_updated_atcreated_by.role(기본값: operator)originating_surface: clistatus: intakeinitial_symptom:description: 파싱된 포지셔널 인자reporter_role: 플래그 or 기본값language: 플래그 or 기본값 (config.yaml → ko)country_iso: 플래그 or config.yaml 기본값matched_symptom_index_entry:data/symptom-index.yaml과 fuzzy 매칭된 ID (매칭 없으면 null)
sap_context: 플래그와 config.yaml 병합turns:- 첫 엔트리:
turn_number: 1,turn_type: intake,status: active,surface: cli
- 첫 엔트리:
current_turn_number: 1audit_trail:- 첫 엔트리:
session_created
- 첫 엔트리:
5. 초기 Bundle 처리 (선택적)
--intake-files가 제공되면 즉시 Bundle 1개를 생성해 bundles/evb-*.yaml로
저장하고, 각 파일을 files/ 아래로 복사하며 SHA-256 해시를 계산해
evidence-bundle.schema.yaml에 맞는 메타데이터를 작성합니다.
자동 감지:
.txt,.log→kind: transaction_log또는message_text.csv,.xlsx→kind: table_export.png,.jpg→kind: screenshot.html→kind: fiori_page_html
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 161 lines · 40 tokens per session scan A 05132cf5d987
sap-session-start is a command published in the GitHub repository BoxLogoDev/sapstack (20 stars, last pushed 19d ago), licensed MIT. It adds 40 tokens to every session and 1,857 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
check
Run the abap2UI5 gates (abaplint and the abap2UI5 linter) over the project or the changed classes, explain every finding and fix the ones that are clearly safe.
abap2ui5-check
Run the abap2UI5 gates (abaplint and the abap2UI5 linter) over the project or the changed classes, explain every finding and fix the ones that are clearly safe.
widget-validate
Validates SAC custom widget JSON metadata and JavaScript structure for correctness and best practices.
sac-debug
Debug SAC script issues with guided analysis and common error resolution.
sqlscript-validate
Validates SQLScript code for syntax, patterns, and best practices with auto-fix capability.
cap-troubleshooter
Diagnostic guide for common CAP errors and issues with solutions.