Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add efeumutaslan/SAP-SKILLS --skill sap-kyma-runtimegit clone --depth 1 https://github.com/efeumutaslan/SAP-SKILLSWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/efeumutaslan/sap-skills/sap-kyma-runtime)<a href="https://agentmods.dev/skills/efeumutaslan/sap-skills/sap-kyma-runtime"><img src="https://agentmods.dev/badge/skills/efeumutaslan/sap-skills/sap-kyma-runtime/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/efeumutaslan/sap-skills/sap-kyma-runtime"><img src="https://agentmods.dev/badge/skills/efeumutaslan/sap-skills/sap-kyma-runtime.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00079 | $0.02312 |
| Opus 5 | $0.00039 | $0.01156 |
| Sonnet 5 | $0.00016 | $0.00462 |
| Haiku 4.5 | $0.00008 | $0.00231 |
Grade A, and why
sap-kyma-runtime scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 294 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SAP BTP Kyma Runtime
Related Skills
sap-s4hana-extensibility— S/4HANA events and APIs consumed by Kyma extensionssap-devops-cicd— CI/CD pipelines for Kyma deploymentssap-security-authorization— XSUAA/IAS integration for Kyma workloadssap-cap-advanced— Deploying CAP applications on Kymasap-event-mesh— Event-driven Kyma Functions consuming SAP events
Quick Start
Choose your extension pattern:
| Scenario | Approach | Key Artifact |
|---|---|---|
| Lightweight webhook / event handler | Kyma Function (serverless) | Function CR |
| Full microservice | Kubernetes Deployment | Deployment + Service + APIRule |
| Scheduled job | Kubernetes CronJob | CronJob CR |
| Event-driven extension | Function + Event subscription | Subscription CR |
| Helm-based app | Helm chart | Chart.yaml + templates |
Minimal Kyma Function:
apiVersion: serverless.kyma-project.io/v1alpha2
kind: Function
metadata:
name: order-handler
namespace: default
spec:
runtime: nodejs20
source:
inline:
source: |
module.exports = {
main: async function (event, context) {
const order = event.data;
console.log('Order received:', order.OrderID);
return { statusCode: 200, body: { status: 'processed' } };
}
};
dependencies: |
{ "name": "order-handler", "version": "1.0.0", "dependencies": {} }
Core Concepts
Kyma Architecture on BTP
- Kyma modules: Modular capabilities (Serverless, Istio, API Gateway, Eventing) enabled per cluster
- BTP Service Operator: Provisions BTP services (XSUAA, HANA, Destination) as Kubernetes secrets
- Istio service mesh: Mutual TLS, traffic management, observability built-in
- Kyma Dashboard: Web UI for managing resources (alternative to kubectl)
Key Custom Resources
| CR | Purpose | Module |
|---|---|---|
Function |
Serverless function | Serverless |
APIRule |
Expose service externally (Istio Gateway) | API Gateway |
Subscription |
Subscribe to SAP/custom events | Eventing |
ServiceInstance |
Provision BTP service | BTP Operator |
ServiceBinding |
Bind BTP service to workload | BTP Operator |
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 294 lines · 79 tokens per session scan A 49ffc238e9ed
sap-kyma-runtime is a skill published in the GitHub repository efeumutaslan/SAP-SKILLS (5 stars, last pushed 5mo ago), licensed MIT. It adds 79 tokens to every session and 2,312 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
michel-run-local-dev-stack
The canonical recipe for starting, checking, and stopping the Packmind local dev stack with Docker Compose — the single source of truth other skills and the Michel agent defer to. Covers bringing the full stack (PostgreSQL, Redis, NestJS API, React/Vite frontend on :4200, MCP server, nginx) up in the background, the…
Ankra CLI rules and best practices for managing Kubernetes clusters via the Ankr
Skill "Ankra CLI rules and best practices for managing Kubernetes clusters via the Ankr" from AmariahAK/atlarix-skills, covering when to use this skill, source, ankra cli best practices, authentication & configuration and /.ankra.yaml example.
docker-development
Use when optimising a Dockerfile, creating or improving docker-compose configurations, implementing multi-stage builds, auditing container security, or reducing image size. Triggers on "Dockerfile", "docker-compose", "container", "image size", "build cache", or "Docker best practices".
hosting-deployment-release
Use this capability for hosting decisions, platform selection, container deployment, serverless deployment, domains, DNS, TLS, staging/production environments, blue-green, canary, rolling deploys, migrations during deploy, health checks, smoke tests, and rollback plans.
Cursor rules for Elixir development with Phoenix and Docker integration
Skill "Cursor rules for Elixir development with Phoenix and Docker integration" from AmariahAK/atlarix-skills, covering when to use this skill, source and commit message guidelines.
Docker Patterns
Use this skill when containerizing an app or debugging container behavior (build failures, missing deps, runtime env differences).