arcgis-pro-automation

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a calculate_field tool which supports Python 3 expressions executed within a worker process. While this allows for dynamic code execution, the skill includes explicit security instructions to inspect expressions for untrusted code, network access, and credential leakage.
  • Evidence: references/safety-and-validation.md specifies that PYTHON3 expressions require confirmation and manual inspection.
  • [EXTERNAL_DOWNLOADS]: The skill documentation directs users to install the arcgis-mcp-bridge package via pip and run a setup utility to establish the execution environment.
  • Evidence: references/runtime-and-licensing.md contains instructions for pip install arcgis-mcp-bridge and arcgis-mcp-setup.
  • [REMOTE_CODE_EXECUTION]: The architecture involves a two-process bridge where a worker interpreter imports the arcpy library and executes geoprocessing jobs. The skill establishes strict boundaries via ARCGIS_MCP_ALLOWED_ROOTS to prevent unauthorized file system access during these operations.
  • Evidence: references/runtime-and-licensing.md describes the process separation and the ARCPY_PYTHON_PATH worker configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 08:46 AM
Security Audit — agent-trust-hub — arcgis-pro-automation