The Agent Skills Directory

[SAFE]: The skill's primary function is to query and summarize data from standard ServiceNow Software Asset Management tables. No suspicious or malicious behaviors were identified.
[COMMAND_EXECUTION]: The skill references Bash for performing REST API calls to relative paths (/api/now/...). These are used for legitimate data retrieval from the host ServiceNow instance and do not target external domains.
[PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes untrusted data from ServiceNow records.
Ingestion points: ServiceNow tables including samp_sw_product, samp_sw_install, and sys_audit defined in SKILL.md.
Boundary markers: None identified in the prompt templates.
Capability inventory: Uses Bash to execute REST API calls; operations are read-only and no file-write or external network capabilities are present.
Sanitization: No explicit sanitization or escaping of record data is mentioned.

product-compliance