procurement-summarization
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data retrieved from external systems, which is a potential surface for indirect prompt injection.
- Ingestion points: Text data is ingested from the
valuefield insys_journal_field(comments and work notes) and theshort_descriptionfield insn_proc_casein Steps 1 and 2. - Boundary markers: The skill does not provide specific delimiters or instructions to ignore embedded commands within the ingested text during the summarization process.
- Capability inventory: The skill possesses capabilities for network operations (via ServiceNow REST API and MCP tools) and shell execution (via the Bash tool listed in frontmatter).
- Sanitization: No explicit sanitization or filtering logic is described for the retrieved journal entries or case descriptions before they are interpolated into the summarization prompt.
Audit Metadata