instance-performance-triage
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze data from ServiceNow logs and telemetry tables, which presents a potential surface for indirect prompt injection if the external data contains malicious instructions.\n
- Ingestion points: Untrusted data enters the agent context through tools like
snow_query_table,snow_get_logs, andsnow_get_inbound_http_logsused to fetch records from tables such assyslogandsyslog_transaction.\n - Boundary markers: There are no instructions provided to use delimiters or explicit warnings to ignore potential instructions embedded within the retrieved telemetry data.\n
- Capability inventory: The agent utilizes read-only ServiceNow API tools for diagnostic purposes; the skill correctly identifies and discourages the use of higher-privilege tools like
snow_execute_scriptfor triage activities.\n - Sanitization: The instructions do not specify any sanitization, escaping, or validation steps for the content of the retrieved logs before they are processed by the agent.
Audit Metadata