Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/sap-samples/cap-agentic-engineered/sap-ui5npx skills add SAP-samples/cap-agentic-engineered --skill sap-ui5git clone --depth 1 https://github.com/SAP-samples/cap-agentic-engineeredWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sap-samples/cap-agentic-engineered/sap-ui5)<a href="https://agentmods.dev/skills/sap-samples/cap-agentic-engineered/sap-ui5"><img src="https://agentmods.dev/badge/skills/sap-samples/cap-agentic-engineered/sap-ui5.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00038 | $0.00453 |
| Opus 5 | $0.00019 | $0.00227 |
| Sonnet 5 | $0.00008 | $0.00091 |
| Haiku 4.5 | $0.00004 | $0.00045 |
Grade A, and why
sap-ui5 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
UI5 MCP-First Development
Before writing, modifying, debugging, or fixing SAPUI5 controllers, XML views, or control bindings, you MUST query the UI5 MCP server and apply its guidance.
Tools
Use mcp__ui5__* tools — primarily mcp__ui5__get_api_reference, mcp__ui5__get_guidelines,
mcp__ui5__run_ui5_linter, and mcp__ui5__get_project_info.
Workflow
- Query before coding — call
mcp__ui5__get_api_referencefor control APIs, ormcp__ui5__get_guidelinesfor project-level patterns - Trust MCP over training knowledge — if guidance conflicts with what you know, follow MCP
- Run the linter after changes — call
mcp__ui5__run_ui5_linterto catch deprecated APIs - Prefer the simplest pattern when MCP returns multiple valid approaches
Scope
This skill covers:
- XML views with
sap.m,sap.f,sap.uxapnamespaces - Controller extensions (
app/**/ext/controller/*.js) - Model bindings, formatters, event handlers
- Control APIs and property configuration
UI5 Code Standards
- XML views only — no JavaScript views
sap.ui.definefor all modules — no globals- Async loading:
data-sap-ui-async="true" - i18n for all user-facing text
- No deprecated APIs (
jQuery.sap.*, sync loading,sap.ui.getCore()) - Fiori Elements controller extensions must be plain objects (not ES6 classes) —
thisrefers to theExtensionAPIinstance
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 45 lines · 38 tokens per session scan A 2b79e2c3f98b
sap-ui5 is a skill published in the GitHub repository SAP-samples/cap-agentic-engineered (12 stars, last pushed 3mo ago), licensed Apache-2.0. It adds 38 tokens to every session and 453 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
weather-fetcher
Instructions for fetching current weather temperature data for Dubai, UAE from Open-Meteo API.
time-skill
Display the current time in Pakistan Standard Time (PKT, UTC+5). Use when the user asks for the current time, Pakistan time, or PKT.
weather-svg-creator
Creates an SVG weather card showing the current temperature for Dubai. Writes the SVG to orchestration-workflow/weather.svg and updates orchestration-workflow/output.md.
agr-cli
Install, share, sync, and create AI agent skills across coding tools (Claude Code, Cursor, Codex, OpenCode, Copilot, Pi) using the agr CLI. Use whenever the user mentions agr, agr.toml, agr.lock, agrx, or asks to: add a skill ("install the pdf skill", "agr add ..."), sync agent resources across tools, share skills…
agr-release
Release process for the agr package. Handles version bumping (major/minor/patch/beta), changelog updates, pre-release quality checks, git tagging, and monitoring the GitHub Actions publish pipeline. Use this skill whenever the user wants to cut a release, bump the version, publish to PyPI, or asks about the release…
linkedin-post
You take a YouTube video transcript and produce a single LinkedIn post draft.