Geoprocessing Specialist
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The agent is designed to process external GIS data and user-provided workspaces, which represents a potential attack surface if the input data contains malicious metadata.
- Ingestion points: Feature classes, rasters, and workspaces accessed via ArcPy.
- Boundary markers: None explicitly defined in the prompt instructions to separate untrusted data from instructions.
- Capability inventory: Extensive file system access and geoprocessing capabilities via the ArcPy library (e.g.,
arcpy.management,da.UpdateCursor). - Sanitization: The skill follows best practices by mandating validation logic (
updateParameters,updateMessages) for every tool created. - [SAFE]: No signs of prompt injection, hardcoded credentials, malicious remote code execution, or obfuscation were found. The skill's behavior matches its stated purpose of GIS automation.
Audit Metadata