servicenow-engineer

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a comprehensive technical reference for ServiceNow architects, covering ITSM, ITOM, and custom application development within the Now Platform.
  • [SAFE]: Code examples utilize standard ServiceNow APIs (GlideRecord, Flow Designer, Integration Hub) and explicitly promote security best practices such as using GlideRecordSecure to honor Access Control Lists (ACLs) and avoiding business rule recursion.
  • [SAFE]: All external references are directed toward the author's public repository or official enterprise services (SAP, Salesforce, Workday) in the context of standard business integrations.
  • [SAFE]: The skill includes defensive programming patterns, such as error handling in Flow Designer and input validation in Script Includes, to ensure robust and secure automation.
  • [SAFE]: Potential indirect prompt injection surfaces are addressed through platform-standard security models. (1) Ingestion points: Integration Hub flows and Import Sets (SKILL.md §5.4). (2) Boundary markers: Not explicitly defined in logic templates. (3) Capability inventory: Subprocess calls via Integration Hub, file-write to ServiceNow tables, and network operations to enterprise endpoints. (4) Sanitization: Recommends GlideRecordSecure for ACL enforcement (SKILL.md §6 #SN6) and structured data mapping.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 01:57 AM