arcgis-arcade
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill instructions demonstrate the use of arcade.createArcadeExecutor to compile and run Arcade expressions from strings. This is a standard and intended feature of the ArcGIS Maps SDK for JavaScript to support dynamic runtime calculations.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing data from external feature layers via the $feature variable, which acts as an ingestion point for external data. While this represents a theoretical injection surface, Arcade is a restricted language designed with a safe sandbox for these purposes. 1. Ingestion points: External feature data accessed through $feature global variables in SKILL.md. 2. Boundary markers: None explicitly shown in the provided code examples. 3. Capability inventory: Use of arcade.createArcadeExecutor and executor.executeAsync in SKILL.md. 4. Sanitization: Relies on the native sandboxing and restricted nature of the Arcade execution environment.
Audit Metadata