skills/happy-technologies-llc/happy-platform-skills/purchase-order-summarization/Gen Agent Trust Hub
purchase-order-summarization
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official ServiceNow REST API endpoints and MCP tools for procurement data management as its primary function.
- [SAFE]: No unauthorized network operations or data exfiltration to external third-party domains were detected.
- [SAFE]: No remote code execution patterns, package installations, or obfuscation techniques were found in the instructions or metadata.
- [DATA_EXPOSURE]: The skill accesses sensitive procurement records (PO costs, vendor details, budget impact); however, this is aligned with its stated purpose of procurement summarization for authorized users.
- [PROMPT_INJECTION]: The skill processes data from ServiceNow tables including journal fields (sys_journal_field) which may contain untrusted user comments. While this presents a minor indirect prompt injection surface, it is a standard characteristic of database-querying skills and no specific exploits are present.
Audit Metadata