Sap Dependency Security
secondsky/sap-skills
SAP dependency security and MCP executable trust policy with secure upgrades, cooldowns, staged rollout, and supply-chain protection.
Guidelines for SAP Fiori app development for CAP and standalone projects.
$ npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install SAP/open-ux-tools sap-fiori-app-development --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/SAP/open-ux-tools.git skills-src && mkdir -p .claude/skills && cp -r skills-src/plugins-coding-agents/fiori/skills/sap-fiori-app-development .claude/skills/sap-fiori-app-development && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "sap-fiori-app-development" agent skill from https://github.com/SAP/open-ux-tools/tree/main/plugins-coding-agents/fiori/skills/sap-fiori-app-development into .claude/skills/sap-fiori-app-development/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sap-fiori-app-development", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/SAP/open-ux-tools/tree/main/plugins-coding-agents/fiori/skills/sap-fiori-app-developmentType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install SAP/open-ux-tools sap-fiori-app-development --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SAP/open-ux-tools.git skills-src && mkdir -p .agents/skills && cp -r skills-src/plugins-coding-agents/fiori/skills/sap-fiori-app-development .agents/skills/sap-fiori-app-development && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "sap-fiori-app-development" agent skill from https://github.com/SAP/open-ux-tools/tree/main/plugins-coding-agents/fiori/skills/sap-fiori-app-development into .agents/skills/sap-fiori-app-development/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sap-fiori-app-development", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install SAP/open-ux-tools sap-fiori-app-development --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SAP/open-ux-tools.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/plugins-coding-agents/fiori/skills/sap-fiori-app-development .cursor/skills/sap-fiori-app-development && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "sap-fiori-app-development" agent skill from https://github.com/SAP/open-ux-tools/tree/main/plugins-coding-agents/fiori/skills/sap-fiori-app-development into .cursor/skills/sap-fiori-app-development/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sap-fiori-app-development", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/SAP/open-ux-tools.git --path plugins-coding-agents/fiori/skills/sap-fiori-app-development--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install SAP/open-ux-tools sap-fiori-app-development --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SAP/open-ux-tools.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/plugins-coding-agents/fiori/skills/sap-fiori-app-development .gemini/skills/sap-fiori-app-development && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "sap-fiori-app-development" agent skill from https://github.com/SAP/open-ux-tools/tree/main/plugins-coding-agents/fiori/skills/sap-fiori-app-development into .gemini/skills/sap-fiori-app-development/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sap-fiori-app-development", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install SAP/open-ux-tools sap-fiori-app-developmentInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/SAP/open-ux-tools.git skills-src && mkdir -p .github/skills && cp -r skills-src/plugins-coding-agents/fiori/skills/sap-fiori-app-development .github/skills/sap-fiori-app-development && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "sap-fiori-app-development" agent skill from https://github.com/SAP/open-ux-tools/tree/main/plugins-coding-agents/fiori/skills/sap-fiori-app-development into .github/skills/sap-fiori-app-development/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sap-fiori-app-development", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install SAP/open-ux-tools sap-fiori-app-development --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/SAP/open-ux-tools.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/plugins-coding-agents/fiori/skills/sap-fiori-app-development .opencode/skills/sap-fiori-app-development && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "sap-fiori-app-development" agent skill from https://github.com/SAP/open-ux-tools/tree/main/plugins-coding-agents/fiori/skills/sap-fiori-app-development into .opencode/skills/sap-fiori-app-development/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "sap-fiori-app-development", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
sap-fiori-app-developmentGuidelines for SAP Fiori app development for CAP and standalone projects.
Sap Fiori App Development is an agent skill from SAP/open-ux-tools, published by the product's own GitHub organization. Guidelines for SAP Fiori app development for CAP and standalone projects. Use when creating or modifying SAP Fiori Elements applications, adding a List Report, Object Page, or Worklist, or connecting a Fiori app to a CAP service or OData endpoint.
Its SKILL.md is about 1.7k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
It works with SAP and Model Context Protocol. The repository describes itself as: Enable community collaboration to jointly promote and facilitate best in class tooling capabilities. The licence is Apache-2.0.
6 steps, taken from the first numbered list in SKILL.md.
Read from SKILL.md and the folder at commit 118fa39. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Shell commands in SKILL.md call:
npmFrom the folder's file list and the shell code blocks in SKILL.md.
No URLs in SKILL.md. Its commands use npm, which can reach the network depending on how they are called.
From URLs in SKILL.md, links to its own repository left out.
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Sap Fiori App Development loads about 1.7k tokens when it runs. Until then it costs about 68 tokens; SKILL.md has 829 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from SAP/open-ux-tools at commit 118fa39, republished under its Apache-2.0 licence (© SAP). 829 words, ~1,678 tokens.
.claude/skills/sap-fiori-app-development/SKILL.md (or your agent's skills folder).sap-fiori-analytical-chart).The Fiori MCP can create the following application templates for both CAP and standalone project backends:
The Fiori MCP can add the following page types to existing applications:
package.json.npm run watch-manage-travel)npm start (live backend) or npm run start-mock (mock data)app folder under the CAP application root folder created before with cds init operation. This root folder is always a subfolder directly under working directory.550e8400-e29b-41d4-a716-446655440001)./webapp/annotations/annotation.xml) referenced in manifest.json with matching uri and localUri values:"annotation": {
"type": "ODataAnnotation",
"uri": "annotations/annotation.xml",
"settings": {
"localUri": "annotations/annotation.xml"
}
}manifest.json dataSources)./webapp/localService/mainService/metadata.xml) referenced in manifest.json must not be edited locally. Any changes to entity definitions, properties, or service structure must be made at the backend source:"dataSources": {
"mainService": {
"uri": "/path/to/odata/service/",
"type": "OData",
"settings": {
"annotations": ["annotation"],
"localUri": "localService/mainService/metadata.xml",
"odataVersion": "4.0"
}
}
}metadata.xml from the live backend for an existing Fiori app, do not use download_odata_service_metadata (that tool is for initial metadata download during app or page creation, not for refreshing metadata already present in the project). Instead, invoke the sap-fiori-create-cli skill's update service-metadata section.© SAP, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in plugins-coding-agents/fiori/skills/sap-fiori-app-development of SAP/open-ux-tools.
Open the folder on GitHubat commit 118fa39
Sap Fiori App Development next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Sap Fiori App Development this skillSAP/open-ux-tools | 158 | — | ~1.7k | Automated safety check: Pass | Apache-2.0 | |
| Sap Dependency Securitysecondsky/sap-skills | 462 | — | ~5.9k | Automated safety check: Warn | GPL-3.0 | |
| MCP Server WorkflowsSAP-samples/hana-developer-cli-tool-example | 112 | — | ~310 | Automated safety check: Pass | Apache-2.0 | |
| Sap Cap Capiresecondsky/sap-skills | 462 | — | ~4.4k | Automated safety check: Pass | GPL-3.0 | |
| Sap Fiori Toolssecondsky/sap-skills | 462 | — | ~4.1k | Automated safety check: Pass | GPL-3.0 | |
| Sap Hana CLIsecondsky/sap-skills | 462 | — | ~3.1k | Automated safety check: Notes | GPL-3.0 |
secondsky/sap-skills
SAP dependency security and MCP executable trust policy with secure upgrades, cooldowns, staged rollout, and supply-chain protection.
SAP-samples/hana-developer-cli-tool-example
Create or update MCP server tools, JSON-RPC handlers, and registrations.
secondsky/sap-skills
SAP Cloud Application Programming Model (CAP) development skill using Capire documentation.
secondsky/sap-skills
Develops SAP Fiori applications using SAP Fiori tools extensions for VS Code and SAP Business Application Studio.
secondsky/sap-skills
Assists with SAP HANA Developer CLI (hana-cli) for database development and administration.
secondsky/sap-skills
This skill should be used when developing SAP UI5 applications, including creating freestyle apps, Fiori Elements apps, custom controls, testing, data binding, OData integration, routing, and…
SAP/open-ux-tools
Develop a new ESLint rule for @sap-ux/eslint-plugin-fiori-tools.
SAP/open-ux-tools
A skill your agent uses when writing, fixing, extending, or reviewing OPA5 integration tests for SAP Fiori Elements applications - whether the app uses OData V4 (sap.fe.test library) or OData V2…
SAP/open-ux-tools
Sync odata-vocabularies package — update all vocabulary resource files to their latest published versions, and optionally add a new vocabulary given its JSON URL.
SAP/open-ux-tools
Add visual filters (chart-based) to SAP Fiori Elements filter bar or value help using CAP or ABAP RAP.
SAP/open-ux-tools
Add analytical chart (chart + table hybrid) to SAP Fiori Elements List Report using aggregated data.
SAP/open-ux-tools
Configure, migrate, or run ESLint with @sap-ux/eslint-plugin-fiori-tools in SAP Fiori projects (standalone or CAP).
Works with
Guidelines for SAP Fiori app development for CAP and standalone projects. Sap Fiori App Development is an agent skill from SAP/open-ux-tools, published by the product's own GitHub organization. Guidelines for SAP Fiori app development for CAP and standalone projects.
Sap Fiori App Development fits situations like: modifying SAP Fiori Elements applications; adding a List Report; connecting a Fiori app to a CAP service.
Run `npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a claude-code`. Or copy the skill folder (plugins-coding-agents/fiori/skills/sap-fiori-app-development in SAP/open-ux-tools) into .claude/skills/sap-fiori-app-development in your project. Claude Code loads it when a task matches its description.
Run `npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a codex`. Or copy the skill folder (plugins-coding-agents/fiori/skills/sap-fiori-app-development in SAP/open-ux-tools) into .agents/skills/sap-fiori-app-development in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add SAP/open-ux-tools --skill sap-fiori-app-development -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/sap-fiori-app-development, .gemini/skills/sap-fiori-app-development, .github/skills/sap-fiori-app-development and .opencode/skills/sap-fiori-app-development in your project.
Going by SKILL.md and its folder, Sap Fiori App Development needs the command-line tools its instructions call (npm).
SKILL.md contains no URLs. Its commands use npm, which can reach the network depending on how they are called. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Sap Fiori App Development is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.7k tokens (SKILL.md is roughly 6.7k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Sap Fiori App Development: Sap Dependency Security (secondsky/sap-skills, 462 stars), MCP Server Workflows (SAP-samples/hana-developer-cli-tool-example, 112 stars), Sap Cap Capire (secondsky/sap-skills, 462 stars) and Sap Fiori Tools (secondsky/sap-skills, 462 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
SAP (a GitHub organization, an official publisher) maintains it in SAP/open-ux-tools, which has 158 GitHub stars. The repository holds 9 skills in this directory. The repository was last updated on October 9, 2026.
Source: SAP/open-ux-tools on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.