shrek-abaper

Abap Code Review — Security skill for Claude Code

Security community

AI agent skill for SAP ABAP pre-release code review — 9-dimension security & quality assessment with structured GO/NO-GO release recommendations.

How to install Abap Code Review

This entry records only its repository, not the path inside it, so there is no exact command to give. Open shrek-abaper/abap-code-review and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Abap Code Review does

AI agent skill for SAP ABAP pre-release code review — 9-dimension security & quality assessment with structured GO/NO-GO release recommendations.

Alternatives in Security

  • Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
  • Skill Audit — Audit codebases for quality, consistency, and broken patterns — use for pre-release or tech debt review 2.8k ★
  • Competitive Audit — Capture a competitor website with Playwright and extract its color system, typography, layout patterns, and 's 309 ★

README

abap-code-review

[English](README.md) | [中文](README.zh-CN.md)

[!IMPORTANT] **This repository has been archived and is no longer updated.** `abap-code-review` is now maintained exclusively in the [sap-engineering-skill](https://github.com/shrek-abaper/sap-engineering-skill) monorepo at [`skills/abap-code-review`](https://github.com/shrek-abaper/sap-engineering-skill/tree/main/skills/abap-code-review). Please go there for the latest version, issues, and improvements.

An AI agent skill for SAP ABAP pre-release code review. Performs a comprehensive security and quality assessment across 9 dimensions and produces a formal, sign-off-ready Markdown report.

Overview

`abap-code-review` is an AI agent skill that guides any AI agent through a structured, repeatable ABAP code review workflow. It is designed to catch security vulnerabilities, authorization gaps, performance risks, and code quality issues before a transport is promoted to production.

Why use it?

  • Consistent coverage — 9 review dimensions, no dimension is ever skipped
  • Evidence-based findings — every finding requires a real code snippet; no speculation
  • Rule-cited — security and standards findings are always tied to a named rule (e.g. SEC-SQL-1, [T-2])
  • Release-decision ready — output is a structured report with GO / CONDITIONAL GO / NO-GO recommendation and a sign-off table

Review Dimensions

# Dimension Key Checks
1 [SEC] Security Vulnerabilities SQL injection, code injection, OS command injection, file path attacks, hardcoded credentials
2 [AUTH] Authorization & Access Control Missing AUTHORITY-CHECK, unchecked SY-SUBRC, authorization bypass patterns
3 [DATA] Data Integrity & Exception Handling SY-SUBRC after FM calls, locking before writes, empty CATCH blocks
4 [PERF] Performance Risks SELECT inside LOOP, SELECT *, full table scans, wrong internal table type
5 **[S

Related Skills

Sap Review — Security skill for Claude Code

Sap Review

Trigger a structured SAP code review — invoked when ABAP, CDS, RAP, BTP, or integration code needs to be revie

Security community
Observability Audit — Security skill for Claude Code

Observability Audit

Observability / instrumentation audit: structured logging quality, log levels & correlation IDs, secrets/PII i

Security community
Strategy Review — Security skill for Claude Code

Strategy Review

Run a full strategic review — competitive positioning, 7 Powers moat assessment, strategy stack audit, and pre

Security community
Review Code Security — Security skill for Claude Code

Review Code Security

Tiered application security audit (T1 pre-commit, T2 feature complete, T3 sprint end) covering OWASP, secrets,

Security community
Claude Security Research Skill — Security skill for Claude Code

Claude Security Research Skill

AI-powered security research assistant for Claude Code — structured assessment workflows, tool orchestration,

Security community
Audit End Sprint — Security skill for Claude Code

Audit End Sprint

End-of-sprint code audit — run 9-dimension sweep (security, quality, tests, dead code, TODO/FIXME, perf, docs,

Security community

Related Agents

Sap Code Reviewer — Security agent for Claude Code

Sap Code Reviewer

ABAP code review — Clean ABAP, performance, security, SAP standard compliance (Opus, R/O)

Security community
Code Security Reviewer — Security agent for Claude Code

Code Security Reviewer

Performs structured code security and quality audits with restricted tool access. Supports tiered review (T1 p

Security community
Tp Audit Scanner — Security agent for Claude Code

Tp Audit Scanner

Use this when the user asks for a security / quality audit, pre-release sweep, or "scan this for issues". Find

Security community