arcgis-core-maps
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the ArcGIS Maps SDK, CSS themes, and Calcite UI components from Esri's official Content Delivery Network (js.arcgis.com).
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for loading external WebMap and WebScene resources using
item-idattributes. While this ingests external data into the map view, it is a core functionality of the ArcGIS platform and does not expose high-risk capabilities like arbitrary command execution or local file system writing.
Audit Metadata