arcgis-pro-automation
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a
calculate_fieldtool which supports Python 3 expressions executed within a worker process. While this allows for dynamic code execution, the skill includes explicit security instructions to inspect expressions for untrusted code, network access, and credential leakage. - Evidence:
references/safety-and-validation.mdspecifies thatPYTHON3expressions require confirmation and manual inspection. - [EXTERNAL_DOWNLOADS]: The skill documentation directs users to install the
arcgis-mcp-bridgepackage viapipand run a setup utility to establish the execution environment. - Evidence:
references/runtime-and-licensing.mdcontains instructions forpip install arcgis-mcp-bridgeandarcgis-mcp-setup. - [REMOTE_CODE_EXECUTION]: The architecture involves a two-process bridge where a worker interpreter imports the
arcpylibrary and executes geoprocessing jobs. The skill establishes strict boundaries viaARCGIS_MCP_ALLOWED_ROOTSto prevent unauthorized file system access during these operations. - Evidence:
references/runtime-and-licensing.mddescribes the process separation and theARCPY_PYTHON_PATHworker configuration.
Audit Metadata