workflow-creation
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
SN-Execute-Background-Scripttool, which permits the execution of arbitrary server-side JavaScript code on the targeted ServiceNow instance, granting significant control over the environment. - [DYNAMIC_EXECUTION]: The primary function of the skill is to programmatically generate and publish ServiceNow workflows. These workflows contain server-side scripts stored in the
inputfield of thewf_activitytable, which are executed at runtime by the platform. - [EXTERNAL_DOWNLOADS]: The documentation contains a link to an external GitHub repository (
https://github.com/your-repo/mcp-servicenow-nodejs) for further documentation, which is not a verified source. - [INDIRECT_PROMPT_INJECTION]: Workflows generated by this skill ingest data from external records through the
currentobject, creating a surface where untrusted data could influence script logic. Examples do not include explicit sanitization or boundary markers to mitigate this risk. * Ingestion points: ServiceNow record fields accessed via thecurrentobject. * Boundary markers: Not present in provided script examples. * Capability inventory:SN-Execute-Background-Script,SN-Create-Record,SN-Update-Record,Bash. * Sanitization: Not present in script examples.
Audit Metadata