widget-coherence
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is purely instructional, focusing on best practices for widget synchronization in the ServiceNow ecosystem. No malicious patterns or security violations were identified during the analysis.- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a standard data ingestion surface where user input is passed from the client controller to the server script for database operations. While this defines a potential attack surface, it is a core feature of the technology described.
- Ingestion points: untrusted data enters the server context via the
inputobject in the Server Script examples (SKILL.md). - Boundary markers: No specific delimiters or instruction-bypass warnings are present in the provided code snippets.
- Capability inventory: The server-side script demonstrates database write capabilities using the
gr.insert()method (SKILL.md). - Sanitization: Code templates focus on architectural structure and do not include specific input validation or sanitization logic, which is typical for boilerplate documentation.
Audit Metadata