update-set-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data for ServiceNow update set metadata, creating an attack surface for indirect prompt injection.
- Ingestion points: User-provided
nameanddescriptionparameters used insnow_update_set_manageandsnow_ensure_active_update_set(SKILL.md). - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the user-supplied input strings.
- Capability inventory: The skill utilizes tools to create, query, switch, complete, and export update sets in ServiceNow (
snow_update_set_manage,snow_update_set_query,snow_ensure_active_update_set). - Sanitization: The instructions do not specify any validation or sanitization for the user-supplied strings before they are sent to the ServiceNow tools.
Audit Metadata