servicenow-engineer
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive technical reference for ServiceNow architects, covering ITSM, ITOM, and custom application development within the Now Platform.
- [SAFE]: Code examples utilize standard ServiceNow APIs (GlideRecord, Flow Designer, Integration Hub) and explicitly promote security best practices such as using
GlideRecordSecureto honor Access Control Lists (ACLs) and avoiding business rule recursion. - [SAFE]: All external references are directed toward the author's public repository or official enterprise services (SAP, Salesforce, Workday) in the context of standard business integrations.
- [SAFE]: The skill includes defensive programming patterns, such as error handling in Flow Designer and input validation in Script Includes, to ensure robust and secure automation.
- [SAFE]: Potential indirect prompt injection surfaces are addressed through platform-standard security models. (1) Ingestion points: Integration Hub flows and Import Sets (SKILL.md §5.4). (2) Boundary markers: Not explicitly defined in logic templates. (3) Capability inventory: Subprocess calls via Integration Hub, file-write to ServiceNow tables, and network operations to enterprise endpoints. (4) Sanitization: Recommends
GlideRecordSecurefor ACL enforcement (SKILL.md §6 #SN6) and structured data mapping.
Audit Metadata