The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the snow_execute_script tool to run server-side ServiceNow JavaScript (ES5). The provided code snippets demonstrate administrative tasks such as creating domains, onboarding tenants, and configuring table visibility.
[PRIVILEGE_ESCALATION]: Several snippets involve operations that bypass or modify security boundaries within ServiceNow:
The 'Cross-Domain Access' section uses gr.setQueryReferences(false) and gr.queryNoDomain() to access data across multi-tenant boundaries, which requires elevated privileges.
The onboardTenant function programmatically assigns users to domains and grants the 'tenant admin' role via the sys_user_has_role table.
These operations are inherent to the skill's purpose of managing domain separation and do not show signs of unauthorized escalation.

domain-separation