relationship-mapping
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill heavily utilizes the
SN-Execute-Background-Scripttool to run server-side JavaScript on the ServiceNow platform. This capability is used for complex logic such as dependency tree building (Step 5) and orphan CI detection (Step 6), and includes scripts that perform destructive actions usinggr.deleteRecord()(Step 7).\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CMDB tables and processes it using scripts without sanitization.\n - Ingestion points: ServiceNow CMDB tables including
cmdb_rel_ci,cmdb_rel_type,cmdb_ci_server,cmdb_ci_appl, andcmdb_ci_database_instance.\n - Boundary markers: None observed in the instructions or script templates to delimit external data from agent instructions.\n
- Capability inventory: The skill has capabilities for record creation, modification, and deletion, as well as arbitrary server-side script execution.\n
- Sanitization: There is no evidence of output sanitization or validation of data retrieved from the CMDB before it is processed by the agent or presented to the user.\n- [COMMAND_EXECUTION]: The skill includes the
Bashnative tool and provides specific command-line examples for interacting with ServiceNow REST APIs usingcurl.
Audit Metadata