supplier-recommendation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from ServiceNow tables (such as vendor notes in
core_companyand terms inast_contract) which could contain untrusted third-party content. - Ingestion points: External data is ingested via
SN-Query-Tableand REST API calls to tables includingcore_company,ast_contract, andproc_negotiationas described inSKILL.md. - Boundary markers: The skill does not use specific delimiters or instructions to ignore potential commands within the retrieved data.
- Capability inventory: The skill utilizes ServiceNow-specific query tools and has access to
Bashfor executing REST requests. - Sanitization: The instructions do not define sanitization or validation logic for the text fields returned by the queries.
Audit Metadata