trend-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Bash to execute REST API calls to ServiceNow. This is a standard method for data retrieval.\n- [REMOTE_CODE_EXECUTION]: The skill uses SN-Execute-Background-Script to run server-side JavaScript for data aggregation. The provided scripts are benign and specific to reporting needs.\n- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection.\n
- Ingestion points: Data is ingested from the incident, problem, and change_request tables via SN-Query-Table and SN-NL-Search.\n
- Boundary markers: None are specified in the instructions.\n
- Capability inventory: The skill has access to Bash for network calls and SN-Execute-Background-Script for server-side code execution.\n
- Sanitization: No specific sanitization or validation of the retrieved ticket data is described.
Audit Metadata