batch-operations

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or unauthorized network activity were detected. The skill consists of legitimate administrative templates and documentation for ServiceNow environments.
  • [COMMAND_EXECUTION]: The skill utilizes the SN-Execute-Background-Script tool to run server-side JavaScript for complex batch operations. This is a core administrative capability explicitly defined in the skill's allowed tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines surfaces for processing external data (e.g., Phase 5.2 JSON import).
  • Ingestion points: Untrusted data enters via the records and updates parameters in batch tools and the importData variable in migration scripts.
  • Boundary markers: None present.
  • Capability inventory: Subprocess execution via SN-Execute-Background-Script and database write operations via SN-Batch-Create and SN-Batch-Update.
  • Sanitization: None present in the data ingestion, although templates demonstrate explicit field mapping which limits the interpretation of data as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:45 AM