generic-crud-operations
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: Provides examples for using the
Bashtool to interact with the ServiceNow Table API viacurlfor querying and updating records. - [DATA_EXFILTRATION]: Performs network operations to interact with external ServiceNow instances (
instance.service-now.com) to retrieve and manage record data. These operations target a well-known service for the skill's primary purpose. - [PROMPT_INJECTION]: A potential surface for indirect prompt injection exists when the agent processes untrusted data retrieved from ServiceNow tables.
- Ingestion points: Data retrieved from ServiceNow records using
SN-Query-Table,SN-Get-Record, andcurlcommands as described inSKILL.md. - Boundary markers: Absent; there are no instructions for using delimiters to distinguish external data from agent instructions.
- Capability inventory: Shell command execution via the
Bashtool and record modification capabilities viaSN-Create-RecordandSN-Update-Recordtools as described inSKILL.md. - Sanitization: Absent; the skill does not include steps for sanitizing or validating external content before it is processed by the agent.
- [NO_CODE]: The skill does not include any executable scripts or binaries, consisting solely of markdown instructions.
Audit Metadata