code-review

Review ServiceNow server-side scripts for security and performance issues.

77|23|Updated Jul 16, 2025
One-click install
npx skills add https://github.com/groeimetai/snow-flow --skill code-review-groeimetai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-review
Source: https://github.com/groeimetai/snow-flow/tree/main/packages/opencode/src/bundled-skills/code-review
Command: npx skills add https://github.com/groeimetai/snow-flow --skill code-review-groeimetai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the need for consistent, secure, and performant ServiceNow code by providing a comprehensive checklist and guidelines for code reviews.

Core Features & Use Cases

  • Automated Code Auditing: Identifies common pitfalls in ServiceNow server-side scripts.
  • Security & Performance Checks: Flags potential vulnerabilities like SQL injection, XSS, and inefficient queries.
  • Code Quality Standards: Enforces best practices for readability, maintainability, and ServiceNow-specific requirements (e.g., ES5 compliance).
  • Use Case: Before deploying a new Business Rule, use this skill to ensure it adheres to security standards, avoids performance bottlenecks, and follows established coding conventions.

Quick Start

Use the code-review skill to audit the provided ServiceNow script for security and performance issues.

Frequently Asked Questions about code-review

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit ServiceNow server-side scripts for security vulnerabilities?▼

You audit ServiceNow scripts for security vulnerabilities by analyzing Business Rules, Script Includes, and Scheduled Jobs against a checklist that checks for SQL/GlideRecord injection risks, XSS prevention gaps, and access control issues to ensure secure deployment.

What is the best way to check ServiceNow Business Rules for performance issues?▼

Checking ServiceNow Business Rules for performance issues involves analyzing server-side scripts for inefficient querying patterns and GlideRecord misuse, ensuring scripts avoid performance bottlenecks and follow established coding conventions.

Can I use an automated code review checklist for ServiceNow Script Includes?▼

Yes, an automated code review checklist for ServiceNow Script Includes identifies common pitfalls, enforces ES5 compliance, and flags security and performance issues to maintain code quality before deployment.

Does ServiceNow server-side scripting require ES5 compliance checks?▼

ServiceNow server-side scripting requires ES5 compliance checks to enforce coding best practices and maintainability. Reviewing scripts against this standard ensures readability and prevents execution errors within the platform environment.

How do I prevent GlideRecord injection in ServiceNow code reviews?▼

Preventing GlideRecord injection in ServiceNow code reviews involves analyzing server-side scripts for proper access control and secure query construction, flagging potential vulnerabilities to ensure safe data retrieval in Business Rules.