Open UX Tools is a collection of open-source modules for building SAP Fiori applications more efficiently. SAP Fiori developers and related projects use the reusable modules to create development tools and to contribute fixes, findings, and improvements through community collaboration.
Borrowing it
Nothing to install: this file belongs to SAP/open-ux-tools. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SAP/open-ux-tools/main/.agents/skills/odata-vocabularies-sync/SKILL.mdgit clone --depth 1 https://github.com/SAP/open-ux-toolsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/sap/open-ux-tools/odata-vocabularies-sync)<a href="https://agentmods.dev/skills/sap/open-ux-tools/odata-vocabularies-sync"><img src="https://agentmods.dev/badge/skills/sap/open-ux-tools/odata-vocabularies-sync/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/sap/open-ux-tools/odata-vocabularies-sync"><img src="https://agentmods.dev/badge/skills/sap/open-ux-tools/odata-vocabularies-sync.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.01539 |
| Opus 5 | $0.00034 | $0.00770 |
| Sonnet 5 | $0.00014 | $0.00308 |
| Haiku 4.5 | $0.00007 | $0.00154 |
Grade A, and why
odata-vocabularies-sync scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 159 lines — stays where its author put it; the contents beside it link to each section on GitHub.
odata-vocabularies-sync
Keeps the packages/odata-vocabularies package in sync with the upstream OData vocabulary sources.
- No argument — update all existing vocabulary resource files to their latest published versions.
- With a URL argument — register and add the new vocabulary first, then update everything.
All file edits are relative to packages/odata-vocabularies/.
Note:
com.sap.cds.vocabularies.*files (ObjectModel, AnalyticsDetails) are hand-crafted and not managed by this skill. Do not attempt to add them via a URL.
Step 1 — Add a new vocabulary (only when a URL argument is provided)
1a. Fetch and inspect the vocabulary JSON
Fetch the JSON at the provided URL (must end in .json — XML URLs are not supported by the update tool). Extract:
namespace— the key of the top-level schema object (e.g.Org.OData.NewThing.V1orcom.sap.vocabularies.NewThing.v1)alias— the value of$Aliasinside that schema object (e.g.NewThing)
Determine the vocabulary family from the namespace:
- Starts with
Org.OData.→ OASIS vocabulary - Starts with
com.sap.vocabularies.→ SAP vocabulary - Starts with
com.sap.cds.→ CDS vocabulary — stop. These files are hand-crafted and cannot be added via this skill. Explain this to the user. - Anything else → stop and ask the user to confirm the family before proceeding.
1b. Edit tools/update.ts
Add an entry to SUPPORTED_VOCABULARIES in alphabetical order within the existing entries:
'<namespace>': {
uri: '<the provided URL>'
},
Note: The entry can include
update: falseto pin the vocabulary and exclude it from future automatic updates (e.g.com.sap.vocabularies.CDS.v1uses this because it is hand-maintained). Omit the field for normal auto-updating behaviour.
1c. Edit src/resources/index.ts
Make all six additions. All six are mandatory — missing any one will cause a runtime error.
- Import — insert alphabetically by alias in the single import block (OASIS and SAP imports are interleaved by alias, not grouped by family):
Use theimport <Alias> from './<namespace>.js';$Aliasvalue from the JSON as the import identifier. Exception: if the alias is a reserved JS keyword or built-in (e.g.JSON,Map,Error), prefix it to form a valid identifier (e.g.JSON→ODataJSON). Also check existing imports for precedent — some aliases are shortened for brevity (e.g.Authorization→Auth).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 159 lines · 68 tokens per session scan A 3b234cf1816c
odata-vocabularies-sync is a skill published in the GitHub repository SAP/open-ux-tools (158 stars, last pushed yesterday), licensed Apache-2.0. It adds 68 tokens to every session and 1,539 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
sap-expert
Expert in SAP ERP systems, ABAP programming, SAP HANA, S/4HANA, Fiori applications, and SAP integration patterns including OData, RFC, and IDoc. Use when the user mentions ERP, enterprise, business apps, ABAP, HANA, or S/4HANA, or when the task involves SAP Ecosystem, ABAP Development, Integration Technologies, or…
fix-cyclic-deps
Detect and resolve cyclic module dependencies introduced during UI5 modernization. Trigger when user mentions: "cyclic dependency", "circular import", "undefined module at runtime", "lazy require", "sap.ui.require sync", "import cycle", or when a module returns undefined despite a correct import path. Classic symptom…
fix-xml-globals
Fix XML view/fragment issues that UI5 linter reports but cannot auto-fix. Use this skill when linter outputs these rules: no-globals - For ALL global variable access in XML views — sap., jQuery., AND app-namespace globals (e.g., com.example.app.utils.Handler.onPress, my.app.formatter.method) no-ambiguous-event-handler…
fix-control-renderer
Fix Control renderer issues that UI5 linter reports but cannot auto-fix. Use this skill when linter outputs these rules: no-deprecated-control-renderer-declaration - For missing renderer declaration, string-based renderer declaration, implicit renderer auto-discovery (removed in modern UI5) no-deprecated-api - For…
fix-deprecated-controls
Fix deprecated control/class/interface/type issues that UI5 linter reports but cannot auto-fix. Use this skill when linter outputs: no-deprecated-api with messages about deprecated class, interface, type, property, or property of class Messages like "Use of deprecated class '...'", "Use of deprecated interface '...'"…
fix-fiori-elements-extensions
Handle Fiori Elements V2 controller extensions during UI5 modernization. Use this skill when: Extension controllers use sap.ui.controller() AND the manifest has a matching controllerName entry (Case B → report only, do not modernize) Extension controllers use Controller.extend() with manifest controllerName…