business-app-insights

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Bash to execute curl commands as an alternative method for querying ServiceNow REST APIs.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with external ServiceNow API endpoints (e.g., /api/now/table/cmdb_ci_business_app) to fetch enterprise data. These network operations are intrinsic to the skill's primary function and target user-specified instances.
  • [CREDENTIALS_UNSAFE]: Authentication is handled using placeholders for environment variables ($SN_USER, $SN_PASS), which is a secure and standard practice for managing secrets without hardcoding them.
  • [SAFE]: The skill performs its primary function of data retrieval and reporting within the user's ServiceNow environment without any detected malicious patterns, obfuscation, or unauthorized data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 02:23 PM
Security Audit — agent-trust-hub — business-app-insights