batch-operations
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized network activity were detected. The skill consists of legitimate administrative templates and documentation for ServiceNow environments.
- [COMMAND_EXECUTION]: The skill utilizes the
SN-Execute-Background-Scripttool to run server-side JavaScript for complex batch operations. This is a core administrative capability explicitly defined in the skill's allowed tools. - [INDIRECT_PROMPT_INJECTION]: The skill defines surfaces for processing external data (e.g., Phase 5.2 JSON import).
- Ingestion points: Untrusted data enters via the
recordsandupdatesparameters in batch tools and theimportDatavariable in migration scripts. - Boundary markers: None present.
- Capability inventory: Subprocess execution via
SN-Execute-Background-Scriptand database write operations viaSN-Batch-CreateandSN-Batch-Update. - Sanitization: None present in the data ingestion, although templates demonstrate explicit field mapping which limits the interpretation of data as instructions.
Audit Metadata