arcgis-cim-symbols
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official
@arcgis/coremodules for symbol construction and utility functions, which is standard practice for ArcGIS developers. - [DYNAMIC_EXECUTION]: The skill implements
CIMExpressionInfoandprimitiveOverrideswhich evaluate Arcade expressions at runtime to calculate symbol properties (e.g., color, size) based on feature attributes. While this involves dynamic evaluation, it is a sandboxed and intended feature of the ArcGIS rendering engine for creating data-driven visualizations. - [INDIRECT_PROMPT_INJECTION]: The skill defines ingestion points where feature attributes (
$feature) are interpolated into expressions. This represents a potential surface for indirect injection if attribute data is untrusted, but the impact is limited to visual symbol properties within the map rendering context.
Audit Metadata