task-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
SN-Execute-Background-Scripttool to perform complex server-side data aggregations and trend calculations. This is a powerful administrative capability used here for legitimate analytical purposes.\n- [DATA_EXFILTRATION]: Accesses ServiceNow operational tables includingtask,sys_user_group, andtask_sla. This data is processed internally by the agent to generate reports and is not sent to external third-party domains.\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes task descriptions and work notes from the ServiceNow environment.\n - Ingestion points: ServiceNow task records (
incident,sc_task,task_sla) read via MCP tools.\n - Boundary markers: None explicitly defined in the provided templates.\n
- Capability inventory: Server-side script execution, writing work notes, and local command execution.\n
- Sanitization: No explicit sanitization or validation of the retrieved task content is specified in the skill logic.
Audit Metadata