ui-actions
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashnative tool and theSN-Execute-Background-ScriptMCP tool. These capabilities are used for local file management during development and for debugging server-side JavaScript logic within a ServiceNow environment, which is consistent with the skill's stated purpose for ServiceNow developers. - [EXTERNAL_DOWNLOADS]: The skill uses
SN-Sync-Script-To-Localto facilitate the transfer of script content from a ServiceNow instance to the local development environment. This is a standard workflow for developers syncing remote code for local editing and version control. - [REMOTE_CODE_EXECUTION]: The skill includes instructions for creating
sys_ui_actionrecords that contain server-side and client-side scripts. It also uses theSN-Execute-Background-Scripttool for testing these scripts. These are standard administrative functions in the ServiceNow platform and are documented here as part of a legitimate development lifecycle. - [CREDENTIALS_UNSAFE]: The skill mentions the requirement of roles like
adminandpersonalizeand interacting with security tables (sys_security_acl). However, it does not contain hardcoded credentials, instead advising on best practices for role-based access control and security validation.
Audit Metadata