The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill references and loads JavaScript libraries from the official ArcGIS CDN (js.arcgis.com), which is a well-known and trusted service for mapping infrastructure.
[INDIRECT_PROMPT_INJECTION]: The skill describes a component designed to process and display user-provided scripts and data, which constitutes an indirect injection surface.
Ingestion points: The script and testData properties of the arcgis-arcade-editor component in SKILL.md.
Boundary markers: The component includes internal diagnostics (arcgisDiagnosticsChange) to provide feedback on script validity.
Capability inventory: The skill facilitates capturing user-inputted Arcade expressions through the arcgisScriptChange event for use in mapping applications.
Sanitization: The skill provides instructions on how to handle events but does not explicitly detail input sanitization, which is expected for a component-level configuration guide.

arcgis-coding-components