incident-lifecycle
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for ServiceNow incident management using Model Context Protocol (MCP) tools and REST APIs.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets, API keys, or credentials were detected. The documentation correctly uses placeholders like
[user_sys_id]or[incident_sys_id]for runtime values. - [EXTERNAL_DOWNLOADS]: The skill does not perform any remote code downloads or package installations. External URLs point to official documentation for ServiceNow and ITIL practices.
- [COMMAND_EXECUTION]: No dangerous shell commands or privilege escalation attempts were found. Bash usage is mentioned as a platform capability but not utilized for malicious purposes.
- [DATA_EXFILTRATION]: All network operations (REST API endpoints) are directed toward standard ServiceNow table APIs for the intended purpose of incident management.
Audit Metadata