The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to execute curl commands against ServiceNow REST API endpoints (e.g., /api/now/table/sn_grc_risk). This is a standard and expected method for interacting with the ServiceNow platform within this context.
[REMOTE_CODE_EXECUTION]: The skill leverages the SN-Execute-Background-Script tool to run server-side JavaScript on the ServiceNow instance. This is used to perform complex data aggregation, heat map calculations, and trend analysis that would be inefficient to process client-side. The scripts are contained within the skill instructions.
[PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it processes data from external ServiceNow tables.
Ingestion points: Data enters the context via queries to the sn_grc_risk, sn_risk_definition, and sn_risk_event tables.
Boundary markers: None explicitly defined in the prompts to separate external data from instructions.
Capability inventory: The skill has access to SN-Execute-Background-Script (server-side JS) and Bash (shell execution).
Sanitization: The analysis scripts perform basic type casting (e.g., parseInt()) for numeric scores, though descriptive text fields are used without additional filtering.

risk-assessment-summarization