incident-management
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill exposes the
snow_execute_script_with_outputtool, which enables the execution of arbitrary server-side JavaScript (ES5) within a ServiceNow environment. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection as it processes data from external records and possesses high-privilege capabilities. 1. Ingestion points: Data is imported from the ServiceNow
incidenttable and other system tables viasnow_query_incidentsandsnow_query_table. 2. Boundary markers: No explicit delimiters or 'ignore' instructions are documented for handling retrieved record content. 3. Capability inventory: The skill includes tools for executing scripts (snow_execute_script_with_output), querying tables (snow_query_table), and searching development artifacts (snow_find_artifact). 4. Sanitization: Code examples demonstrate direct property access and assignment usingsetValueandgetValuewithout sanitization or validation of the ingested strings.
Audit Metadata