SAP/ai-skills-library is a catalogue for discovering, filtering, and installing AI skills that support SAP digital assistants. SAP users and contributors can install listed skills with the skills CLI across compatible coding agents, while skill authors keep their implementations in their own public repositories and register them with the library. The catalogue contains five of the library's skills and its plugin.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/SAP/ai-skills-libraryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/sap/ai-skills-library/aicore-skills)<a href="https://agentmods.dev/plugins/sap/ai-skills-library/aicore-skills"><img src="https://agentmods.dev/badge/plugins/sap/ai-skills-library/aicore-skills/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/sap/ai-skills-library/aicore-skills"><img src="https://agentmods.dev/badge/plugins/sap/ai-skills-library/aicore-skills.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
aicore-skills scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 24d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "aicore-skills",
"description": "Skills for SAP AI Core.",
"author": {
"name": "SAP"
},
"source": "./plugins/aicore-skills",
"homepage": "https://skills.cloud.sap"
}What it installs
The manifest is a name and a version. 4 skills travel with it, and installing the plugin installs all of them — 253 tokens a session between them. Each is measured on its own page, and each can be installed alone.
What ships with it
1 file beside marketplace.json#aicore-skills in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 24d ago First seen · 9 lines scan A b5dccc7edd2e
aicore-skills is a plugin published in the GitHub repository SAP/ai-skills-library (81 stars, last pushed 11d ago), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-22.
Other plugins, from other repositories
gemini-skills
A library of skills for the Gemini API, SDK and model interactions.
langfuse
Skills for working with Langfuse, the open-source LLM engineering platform for tracing, prompt management, and evaluation.
developer-kit-ai
AI/ML capabilities including prompt engineering, RAG, and chunking strategies.
ai
AI & LLM — Prompting, retrieval, evaluation, agents, and the production concerns of shipping a model.
experiment-tracker
ML experiment tracking with metrics logging and run comparison.
context-compression
Production strategies for compressing LLM context windows. Anchored iterative summarization, opaque compression, tokens-per-task optimization, and probe-based evaluation.