relationship-mapping

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill heavily utilizes the SN-Execute-Background-Script tool to run server-side JavaScript on the ServiceNow platform. This capability is used for complex logic such as dependency tree building (Step 5) and orphan CI detection (Step 6), and includes scripts that perform destructive actions using gr.deleteRecord() (Step 7).\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CMDB tables and processes it using scripts without sanitization.\n
  • Ingestion points: ServiceNow CMDB tables including cmdb_rel_ci, cmdb_rel_type, cmdb_ci_server, cmdb_ci_appl, and cmdb_ci_database_instance.\n
  • Boundary markers: None observed in the instructions or script templates to delimit external data from agent instructions.\n
  • Capability inventory: The skill has capabilities for record creation, modification, and deletion, as well as arbitrary server-side script execution.\n
  • Sanitization: There is no evidence of output sanitization or validation of data retrieved from the CMDB before it is processed by the agent or presented to the user.\n- [COMMAND_EXECUTION]: The skill includes the Bash native tool and provides specific command-line examples for interacting with ServiceNow REST APIs using curl.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 11:45 AM