Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Knuckles-Team/servicenow-api --skill servicenow-cicd-devopsgit clone --depth 1 https://github.com/Knuckles-Team/servicenow-apiWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/knuckles-team/servicenow-api/servicenow-cicd-devops)<a href="https://agentmods.dev/skills/knuckles-team/servicenow-api/servicenow-cicd-devops"><img src="https://agentmods.dev/badge/skills/knuckles-team/servicenow-api/servicenow-cicd-devops/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/knuckles-team/servicenow-api/servicenow-cicd-devops"><img src="https://agentmods.dev/badge/skills/knuckles-team/servicenow-api/servicenow-cicd-devops.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00185 | $0.01749 |
| Opus 5.5 | $0.00074 | $0.00700 |
| Sonnet 5.5 | $0.00037 | $0.00350 |
| Haiku 4.5 | $0.00018 | $0.00175 |
Grade A, and why
servicenow-cicd-devops scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 18d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 128 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ServiceNow CI/CD & DevOps (release engineering)
The operational release surface: promote code between instances, scan it, gate it
through DevOps change control, and prove it with ATF. Six condensed tools cover the
whole pipeline. The full per-action catalog lives in
references/actions-catalog.md — read it just-in-time when you need the exact
parameter names for an action.
When to use
- Install / publish / roll back a scoped app from a source-control app repo.
- Kick off and poll code or instance scans (full / point / combo / suite).
- Gate a deployment through DevOps change control and register artifacts/packages.
- Move configuration between instances with update sets (create → preview → commit).
- Apply remote source-control changes or import a repository.
- Activate or roll back a plugin.
- Run an Automated Test Framework (ATF) test suite.
When NOT to use
- Generic table CRUD / aggregate / raw REST →
servicenow-table-api. - Bulk data ingest, attachments, or bundled REST →
servicenow-import-attachment-batch. - Flow-to-mermaid, email, metricbase, app metadata →
servicenow-platform-utilities. - Authoring an app locally (SDK scaffolding) → the dev-tooling skill
servicenow-sdk-lifecycle; it defers here for the remote deploy/publish/test steps.
Prerequisites & environment
Connect via the mcp-client skill against the servicenow-api MCP server.
| Variable | Required | Notes |
|---|---|---|
SERVICENOW_INSTANCE |
✅ | Instance URL (alias SERVICENOW_URL) |
SERVICENOW_USERNAME |
✅ | Basic-auth user |
SERVICENOW_PASSWORD |
✅ | Basic-auth password |
SERVICENOW_CLIENT_ID / SERVICENOW_CLIENT_SECRET |
optional | OAuth2 |
SERVICENOW_SSL_VERIFY |
optional | TLS verification toggle |
Full env/tag matrix (do not re-document here): the mcp-client reference
agent-tools/mcp-client/references/servicenow-api.md. MCP_TOOL_MODE
(condensed|verbose|both) selects the condensed surface (used below) vs. the
one-to-one verbose tools.
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 18d ago Changed 6494993c65ba
- 1mo ago First seen · 128 lines · 185 tokens per session scan A b30dd1351f11
servicenow-cicd-devops is a skill published in the GitHub repository Knuckles-Team/servicenow-api (20 stars, last pushed today), licensed MIT. It adds 185 tokens to every session and 1,749 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
publish-specimen
MUST READ before publishing a Specimen from the lab to the embody.tools Collection -- the full path from a built /specimenlab COMP through the user's approval to a verified live card: export, prompt, cover, manifest, generated site data, local checks, commit, PR to main, Platform CI deploy + sync-specimens, live…
gitlab-pipelines
CI/CD pipeline review on GitLab via the gitlab-api MCP server — review pipeline results for a project, a group, or the whole instance, drill into the CI jobs of a pipeline, and read a job's log; also trigger a pipeline on a ref. Use when the agent must review CI results across a project/group/organization, check…
vibeue
Unreal Engine 5 development using the VibeUE Python API. Use when working in Unreal Engine — blueprints, state trees, materials, actors, landscapes, animation, niagara, widgets, sound, foliage, gameplay tags, enhanced input, skeletons, PCG (procedural content generation), and more. VibeUE is an extension of Unreal's…
link-reader
Default when the user drops a video, audio, social, or article URL without other instructions — read the original source (not search snippets), say what is still missing, explain what the source actually says, then add judgment. Use for X/Twitter, YouTube, Bilibili, podcasts, WeChat, Xiaohongshu, and open web links.
x-reader
Read source URLs from X/Twitter, articles, YouTube, Bilibili, podcasts, WeChat, Xiaohongshu, Telegram, RSS, and the open web. Use when the user provides a link and wants the original content, evidence, transcript, summary, or source-grounded analysis.
analyzer
Turn source content or a verified transcript into a structured, evidence-grounded analysis with key insights, risks, and action items.