ServiceNow Code Review

Overview

This skill covers systematic code review for ServiceNow scripts to identify and remediate:

• Security vulnerabilities (injection, XSS, privilege escalation, data exposure)
• Performance anti-patterns (unnecessary queries, N+1 problems, missing query limits)
• Platform best practice violations (API misuse, scope issues, deprecated methods)
• Maintainability concerns (naming, documentation, complexity, dead code)
• Concurrency and transaction safety issues
• Client-side performance and UX problems

When to use: Before deploying new scripts to production, during code review processes, when troubleshooting performance issues, or when auditing existing scripts for security compliance.

Prerequisites

• Roles: admin, security_admin, or developer with read access to script tables
• Access: sys_script, sys_script_include, sys_ui_script, sys_script_client tables