control-objective-management

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the SN-Execute-Background-Script tool to run server-side JavaScript logic within the ServiceNow environment for calculating control effectiveness and identifying compliance gaps.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations via REST API endpoints and Bash commands (curl) to query and update compliance records in a ServiceNow instance.
  • [PROMPT_INJECTION]: The skill reads external data from ServiceNow tables that could contain untrusted input. While it lacks explicit boundary markers to delimit this data, the skill processes this information for standard reporting and record management tasks.
  • Ingestion points: Compliance tables (sn_compliance_control_objective, sn_compliance_citation, sn_compliance_control) accessed via SN-Query-Table and REST.
  • Boundary markers: None observed.
  • Capability inventory: SN-Create-Record, SN-Update-Record, SN-Execute-Background-Script, and Bash tool access.
  • Sanitization: None observed.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 02:23 PM
Security Audit — agent-trust-hub — control-objective-management