script-sync
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents a developer workflow for ServiceNow script management. It promotes security best practices by explicitly instructing against storing credentials in local files or repositories.
- [SAFE]: The workflow incorporates a "freshness check" mechanism to prevent accidental overwrites of remote data, which serves as a data integrity protection.
- [INDIRECT_PROMPT_INJECTION]: The skill involves fetching script content from an external platform (ServiceNow) and processing it locally. While this introduces a theoretical surface for instructions embedded in scripts to influence the agent, the workflow is designed for explicit review and local development, which mitigates risk.
- Ingestion points: ServiceNow script content via
SN-Query-TableandSN-Get-Record(SKILL.md). - Boundary markers: None explicitly defined for external script content.
- Capability inventory: Local file system
Writeand network record updates viaSN-Update-Record(SKILL.md). - Sanitization: No explicit sanitization or escaping of the fetched script content is mentioned.
Audit Metadata