arcgis-portal-content
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the ArcGIS Maps SDK and its components from the official Esri CDN (
js.arcgis.com). As Esri is a well-known technology provider in the GIS industry, these references are standard for integrating ArcGIS capabilities and are considered safe. - [INDIRECT_PROMPT_INJECTION]: The skill provides mechanisms to ingest and process data from external ArcGIS Portal items and queries.
- Ingestion points: Data enters the agent's context through metadata (titles, snippets, tags) and structured JSON configurations retrieved via
PortalItem.load()andportal.queryItems()inSKILL.md. - Boundary markers: The documentation does not explicitly define delimiters or instructions to ignore instructions that might be embedded in portal item descriptions or titles.
- Capability inventory: The skill includes network operations (ArcGIS REST API) and content modification capabilities (
map.save(),item.update()), which could be leveraged if malicious data is processed. - Sanitization: There are no explicit examples of data sanitization or schema validation for the external content before it is processed or displayed.
Audit Metadata