servicenow-change-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and acts upon data from external sources such as ServiceNow incidents, change requests, and network device logs. This data is used to drive automated decisions, such as gating network changes.\n
- Ingestion points: External data is retrieved via
list_incidents,get_change_request_details, andpyats_show_logginginSKILL.md.\n - Boundary markers: No specific boundary markers or instructions to ignore embedded instructions are provided for the external data.\n
- Capability inventory: The skill allows the agent to execute network configurations (
pyats_configure_device), update ServiceNow records, and manage the GAIT audit trail.\n - Sanitization: The skill lacks explicit sanitization or validation of the content retrieved from external sources.\n- [COMMAND_EXECUTION]: The skill performs shell command execution using the
$MCP_CALLwrapper to run scripts defined in environment variables (e.g.,$SERVICENOW_MCP_SCRIPT,$PYATS_MCP_SCRIPT). This is the primary mechanism for interacting with ServiceNow and network devices, but it requires the agent to have shell access.
Audit Metadata