skills/happy-technologies-llc/happy-platform-skills/purchase-order-summarization/Gen Agent Trust Hub
purchase-order-summarization
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from several external ServiceNow tables (
proc_po,proc_po_item,core_company, etc.) which acts as untrusted input. - Ingestion points: Data is retrieved using tools like
SN-Query-TableandSN-Get-Recordas described inSKILL.md. - Boundary markers: There are no explicit instructions or delimiters provided to the agent to distinguish between its core instructions and the external data being processed.
- Capability inventory: The skill has access to the
Bashshell and various ServiceNow API tools. - Sanitization: No data sanitization or escaping techniques are mentioned for handling the retrieved content before it is processed by the model.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executecurlcommands for interacting with ServiceNow REST API endpoints. This is a standard procedure for the skill's intended procurement tasks.
Audit Metadata