itsm-incident-summarization
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
SN-Execute-Background-Scripttool to run server-side JavaScript on the ServiceNow platform. This tool is used for data aggregation and formatting within the ITSM environment and typically requires administrative privileges. - [PROMPT_INJECTION]: The skill demonstrates a surface for indirect prompt injection because it reads and processes user-controlled incident fields. Ingestion points: Incident descriptions and work notes from ServiceNow via
SN-Get-RecordandSN-Query-Table. Boundary markers: None. Capability inventory:SN-Execute-Background-Script,SN-Update-Record, andSN-Add-Work-Notes. Sanitization: Basic HTML removal via regex in the background script.
Audit Metadata