deployment-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requests access to the
Bashshell and utilizes theSN-Execute-Background-Scripttool to run server-side GlideScript on ServiceNow instances for validation and deployment tasks. - [DYNAMIC_EXECUTION]: Scripts are dynamically generated and executed on the ServiceNow platform (e.g., in Phase 4.3 and 7.2) to automate conflict resolution and rollback analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted configuration data from ServiceNow update set tables (
sys_update_xml), which could serve as a vector for indirect instructions. - Ingestion points: Metadata and payloads from the
sys_update_xml,sys_remote_update_set, andsys_update_preview_problemtables (SKILL.md, Step 1.2, Step 4.2). - Boundary markers: None provided in the instruction templates.
- Capability inventory: The skill possesses high-privilege capabilities including
SN-Execute-Background-Script,SN-Update-Record, and localBashaccess. - Sanitization: Validation logic exists in Step 1.2 to check for hardcoded identifiers, but there is no specific filtering for prompt injection patterns in the ingested data.
Audit Metadata