SAP/ai-skills-library is a catalogue for discovering, filtering, and installing AI skills that support SAP digital assistants. SAP users and contributors can install listed skills with the skills CLI across compatible coding agents, while skill authors keep their implementations in their own public repositories and register them with the library. The catalogue contains five of the library's skills and its plugin.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add SAP/ai-skills-library --skill aicore-admin-resourcesgit clone --depth 1 https://github.com/SAP/ai-skills-libraryWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sap/ai-skills-library/aicore-admin-resources)<a href="https://agentmods.dev/skills/sap/ai-skills-library/aicore-admin-resources"><img src="https://agentmods.dev/badge/skills/sap/ai-skills-library/aicore-admin-resources/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sap/ai-skills-library/aicore-admin-resources"><img src="https://agentmods.dev/badge/skills/sap/ai-skills-library/aicore-admin-resources.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.01253 |
| Opus 5.5 | $0.00000 | $0.00501 |
| Sonnet 5.5 | $0.00000 | $0.00251 |
| Haiku 4.5 | $0.00000 | $0.00125 |
Grade A, and why
aicore-admin-resources scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
Prints a raw Bearer token to stdout — useful for curl testing: How it starts
The opening of the file, as written. The whole thing — 154 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Rules
- Always run
check_setup.pyfirst when credentials are unknown or when any script fails with an auth error. AICORE_BASE_URLmust end in/v2— this is the single most common misconfiguration.- Never display or log the client secret or token value in clear text. Print only what the user needs (e.g. the resource group, not the full config).
- X.509 certificate auth is an alternative to client secret — both are supported.
Check Setup
Verifies credentials and prints the active resource group:
uv run scripts/check_setup.py
Expected output on success:
{
"status": "ok",
"resource_group": "<your-resource-group>",
"base_url": "https://api.ai.<region>...",
"auth_url": "https://..."
}
If this fails, read references/SETUP.md for step-by-step credential configuration.
Get Auth Token
Prints a raw Bearer token to stdout — useful for curl testing:
export TOKEN=$(uv run scripts/get_token.py)
Always capture the token into a variable. Never run get_token.py standalone or with 2>&1 — that prints the raw JWT into the conversation. The success message already goes to stderr cleanly; $() capture gives only the bare token.
Configure Credentials
Three options — see references/SETUP.md for the full guide:
| Option | Command / Action |
|---|---|
| Interactive CLI (recommended) | aicore configure |
| Environment variables | Set AICORE_AUTH_URL, AICORE_CLIENT_ID, AICORE_CLIENT_SECRET, AICORE_BASE_URL, AICORE_RESOURCE_GROUP |
| Profile config file | Create ~/.aicore/config.json |
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/SETUP.md 3.4 KB
- scripts/check_setup.py 2.5 KB runs code
- scripts/create_resource_group.py 3.7 KB runs code
- scripts/delete_resource_group.py 2.6 KB runs code
- scripts/get_token.py 1.4 KB runs code
- scripts/list_resource_groups.py 8.1 KB runs code
- scripts/patch_resource_group.py 2.9 KB runs code
- scripts/set_profile.sh 1.4 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago Changed · +1 lines · -100 tokens per session bd18965a5c26
- 17d ago Changed · +1 lines 9660d8503702
- 24d ago First seen · 152 lines · 100 tokens per session scan A c9b83d288deb
aicore-admin-resources is a skill published in the GitHub repository SAP/ai-skills-library (81 stars, last pushed 11d ago), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 1,253 tokens. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-22.
Other skills, from other repositories
agent-platform-tuning
Agent Platform Model Tuning. Use when you need to fine-tune open models or Gemini models using Agent Platform infrastructure. Don't use for model training outside Agent Platform, model deployment to endpoints (use agent-platform-deploy), or managing serving endpoints (use agent-platform-endpoint-management).
gke-compute-classes
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto…
gke-alert-configuration
Configures alerting policies in Terraform for Google Kubernetes Engine (GKE) clusters, workloads, and services using PromQL and Google Cloud Managed Service for Prometheus. Use when writing, analyzing, validating, or deploying Terraform alerting policies to monitor GKE service latency, traffic, error rates using…
gke-ai-troubleshooting-tpu-partition-overlap
Diagnose and resolve GKE TPU slice creation failures (SliceCreationFailed) caused by partition overlap conflicts where requested TPU partitions or their nodes are already used by another slice or JobSet. Use when diagnosing GKE TPU slice creation failures with SliceCreationFailed partition or node conflicts. Don't use…
application-design-center-design-deploy
Processes GCP infrastructure design and deployment workflows within Application Design Center (ADC). Use when: - Designing GCP infrastructure with Terraform. - Validating local HCL. - Performing best-practice plan scans. - Importing templates to Application Design Center (ADC). - Deploying templates. - Troubleshooting…
cloud-run-basics
Manages Cloud Run services, jobs, and worker pools. Use when you need to deploy applications responding to HTTP requests (services), run event-triggered or scheduled tasks (jobs), or handle always-on pull-based background processing (worker pools).