code-review

Review ServiceNow server-side scripts for security and performance issues.

77|23|Updated Jul 16, 2025
One-click install
npx skills add https://github.com/groeimetai/snow-flow --skill code-review-groeimetai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/groeimetai/snow-flow/tree/main/packages/opencode/src/bundled-skills/code-review
Command: npx skills add https://github.com/groeimetai/snow-flow --skill code-review-groeimetai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the need for consistent, secure, and performant ServiceNow code by providing a comprehensive checklist and guidelines for code reviews.

Core Features & Use Cases

  • Automated Code Auditing: Identifies common pitfalls in ServiceNow server-side scripts.
  • Security & Performance Checks: Flags potential vulnerabilities like SQL injection, XSS, and inefficient queries.
  • Code Quality Standards: Enforces best practices for readability, maintainability, and ServiceNow-specific requirements (e.g., ES5 compliance).
  • Use Case: Before deploying a new Business Rule, use this skill to ensure it adheres to security standards, avoids performance bottlenecks, and follows established coding conventions.

Quick Start

Use the code-review skill to audit the provided ServiceNow script for security and performance issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit ServiceNow server-side scripts for security vulnerabilities?

You audit ServiceNow scripts for security vulnerabilities by analyzing Business Rules, Script Includes, and Scheduled Jobs against a checklist that checks for SQL/GlideRecord injection risks, XSS prevention gaps, and access control issues to ensure secure deployment.

What is the best way to check ServiceNow Business Rules for performance issues?

Checking ServiceNow Business Rules for performance issues involves analyzing server-side scripts for inefficient querying patterns and GlideRecord misuse, ensuring scripts avoid performance bottlenecks and follow established coding conventions.

Can I use an automated code review checklist for ServiceNow Script Includes?

Yes, an automated code review checklist for ServiceNow Script Includes identifies common pitfalls, enforces ES5 compliance, and flags security and performance issues to maintain code quality before deployment.

Does ServiceNow server-side scripting require ES5 compliance checks?

ServiceNow server-side scripting requires ES5 compliance checks to enforce coding best practices and maintainability. Reviewing scripts against this standard ensures readability and prevents execution errors within the platform environment.

How do I prevent GlideRecord injection in ServiceNow code reviews?

Preventing GlideRecord injection in ServiceNow code reviews involves analyzing server-side scripts for proper access control and secure query construction, flagging potential vulnerabilities to ensure safe data retrieval in Business Rules.