Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add personamanagmentlayer/pcl --skill servicenow-expertgit clone --depth 1 https://github.com/personamanagmentlayer/pclWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/personamanagmentlayer/pcl/servicenow-expert)<a href="https://agentmods.dev/skills/personamanagmentlayer/pcl/servicenow-expert"><img src="https://agentmods.dev/badge/skills/personamanagmentlayer/pcl/servicenow-expert/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/personamanagmentlayer/pcl/servicenow-expert"><img src="https://agentmods.dev/badge/skills/personamanagmentlayer/pcl/servicenow-expert.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Data Exfiltration · line 114 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00075 | $0.03199 |
| Opus 5 | $0.00037 | $0.01599 |
| Sonnet 5 | $0.00015 | $0.00640 |
| Haiku 4.5 | $0.00007 | $0.00320 |
Grade A, and why
servicenow-expert scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 483 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ServiceNow Expert
Core Concepts
ServiceNow Platform
- ITSM - IT Service Management (Incident, Problem, Change)
- ITOM - IT Operations Management
- ITBM - IT Business Management
- CMDB - Configuration Management Database
- Service Portal - User-facing portal interface
- Flow Designer - Visual workflow automation
Development Components
- Business Rules - Server-side scripts on table operations
- Client Scripts - Client-side validation and logic
- UI Policies - Dynamic form behavior
- Script Includes - Reusable server-side code libraries
- Scheduled Jobs - Automated background tasks
- Transform Maps - Data import/integration mapping
Scripting APIs
- GlideRecord - Database query and manipulation
- GlideAjax - Asynchronous client-server communication
- GlideSystem - System utilities (gs object)
- GlideDateTime - Date and time operations
- GlideUser - User information and permissions
- RESTMessageV2 - External API integration
Implementation Examples
GlideRecord Query and Update
// Business Rule - Update related records
(function executeRule(current, previous /*null when async*/) {
// Query for related incidents
var gr = new GlideRecord('incident');
gr.addQuery('caller_id', current.sys_id);
gr.addQuery('state', 'IN', '1,2,3'); // New, In Progress, On Hold
gr.query();
var incidentCount = 0;
var incidentNumbers = [];
while (gr.next()) {
// Update priority based on user's VIP status
if (current.vip == true) {
gr.priority = '1'; // Critical
gr.update();
incidentCount++;
incidentNumbers.push(gr.number.toString());
}
}
// Log activity
if (incidentCount > 0) {
gs.addInfoMessage(
'Updated ' + incidentCount + ' incidents: ' + incidentNumbers.join(', ')
);
gs.info(
'VIP status updated for user ' +
current.sys_id +
', affected incidents: ' +
incidentNumbers.join(', ')
);
}
})(current, previous);
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 483 lines · 75 tokens per session scan A d01bda3454b9
servicenow-expert is a skill published in the GitHub repository personamanagmentlayer/pcl (40 stars, last pushed yesterday), licensed Apache-2.0. It adds 75 tokens to every session and 3,199 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.
Other skills, from other repositories
servicenow-cmdb
ITOM CMDB operations on the ServiceNow CMDB + CI Lifecycle Management APIs via the servicenow-api MCP server — query configuration items by class, read a CI with its attributes and relations, create/update/patch CI instances, manage CI relationships, and drive the CI lifecycle (status, actions, leases, operators). Use…
servicenow-cmdb-health-audit
Audit ServiceNow CMDB health using NowAIKit MCP tools — find duplicate, orphaned, and stale CIs, score completeness, and propose remediation. Use when the user asks to check CMDB health, data quality, CSDM conformance, or clean up the CMDB.
servicenow-incident-triage
Triage a ServiceNow incident or a queue of incidents using NowAIKit MCP tools — gather context, find similar past incidents, suggest a resolution, set priority, and assign. Use when the user asks to triage, investigate, prioritize, or work an incident (by number or as a batch).
servicenow-safe-deployment
Safely build and deploy ServiceNow artifacts (business rules, scripts, flows, catalog items) across instances using NowAIKit MCP tools, with update sets, dry-run previews, and ATF verification. Use when the user asks to deploy, promote, build, or move changes between dev/test/prod.
credential-setup-with-computer-use
Guides n8n credential setup through Computer Use browser tools. Use when a user needs OAuth apps, API keys, client IDs, client secrets, or other credential values from an external service console.
n8n-docs-assistant
Answers n8n product, setup, credential, node, hosting, API, and usage questions from current n8n docs. Use when the user asks how to configure, set up, troubleshoot, or understand n8n behavior, especially credential setup questions opened from the credential modal.