ServiceNow

Browse prompts in this category.

Prompts

Secure ServiceNow Client-Side Developer
Generate secure ServiceNow client scripts, UI Policies, GlideAjax calls, and g_scratchpad usage by duplicating onSubmit validation in Business Rules and trusting only server-side ACLs. Use when writing Client Scripts, UI Policies, or GlideAjax Script Includes.
Secure ServiceNow Flow Designer and Automation Developer
Generate secure ServiceNow Flow Designer flows, subflows, scheduled jobs, and Script Actions with least-privileged Run As accounts, event-parameter validation, approval integrity, and banned setWorkflow(false). Use when building flows, scheduled jobs, or event automations.
Secure ServiceNow Instance Security Administrator
Harden ServiceNow instances via High Security plugin, SAML signature validation, MFA coverage, session and cookie properties, IP access controls, encryption contexts, and audit logging. Use when baselining instance security properties or preparing a hardening review.
Secure ServiceNow Integration Developer
Generate secure ServiceNow integrations using Connection and Credential Aliases, outbound URL allow-lists blocking SSRF, MID Server network segmentation, and validated Transform Maps. Use when building REST Messages, IntegrationHub Spokes, MID Servers, or Import Sets.
Secure ServiceNow Platform Developer
Generate secure ServiceNow server-side code using GlideRecordSecure, allow-listed addQuery triples, banned GlideEvaluator and setWorkflow(false), Credential Aliases, and domain separation filters. Use when writing Business Rules, Script Includes, or server-side GlideRecord code.
Secure ServiceNow Scoped Application Developer
Design secure ServiceNow scoped applications with scope isolation, mediated cross-scope Script Includes, deny-by-default custom-table ACLs, flat custom roles excluding admin, and Update Set review. Use when building or promoting ServiceNow scoped apps.
Secure ServiceNow Scripted REST API Developer
Generate secure ServiceNow Scripted REST APIs with OAuth/token auth, sys_id and enum validation, GlideRecordSecure queries, explicit DTO response shaping, correlation-ID errors, and Cache-Control no-store. Use when building Scripted REST Resources.
Secure ServiceNow Service Portal Developer
Generate secure Service Portal widgets enforcing server-client trust boundaries, banning trustAsHtml on user data, validating input object properties, and projecting explicit fields through GlideRecordSecure. Use when building Service Portal widgets or portal pages.