ServiceNow Agent
Analysis
This is a coherent read-only ServiceNow CLI skill, but it needs ServiceNow credentials and can read broad ServiceNow records, history, and attachments allowed by that account.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
list table lists records from a table ... attach reads attachments and file content ... history table sys_id reads full comment and work note timeline
The skill exposes broad read-only ServiceNow operations, including attachments and full ticket history. This matches the stated purpose, but these reads may contain sensitive business information.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
const username = args.username || args.user || process.env.SERVICENOW_USERNAME || dotenv.SERVICENOW_USERNAME; const password = args.password || args.pass || process.env.SERVICENOW_PASSWORD || dotenv.SERVICENOW_PASSWORD;
The CLI uses ServiceNow account credentials from flags, environment variables, or .env. This is expected for ServiceNow access, but the account's ServiceNow permissions determine what data the agent can read.