issue-validator
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
SN-Execute-Background-Scripttool to run server-side GlideScript on the ServiceNow instance to perform complex data validation. This is a standard administrative function for GRC managers. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Reads from multiple ServiceNow tables including
sn_grc_issueandsn_grc_risk(SKILL.md). - Boundary markers: Absent.
- Capability inventory: Uses server-side scripting (ServiceNow) and local command execution (Bash).
- Sanitization: Absent; the skill processes raw field values from the database into a JSON report without filtering for potential injection patterns.
Audit Metadata