arcgis-html-css
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest, repair, and convert user-supplied HTML and CSS code, which represents an attack surface for instructions embedded in external data.
- Ingestion points: User-provided markup fragments for repair or conversion as described in
SKILL.mdand the reference profiles. - Boundary markers: The instructions mandate strict adherence to specific profile references and allowlists, which helps mitigate accidental obedience to embedded instructions by defining clear limits for acceptable output.
- Capability inventory: The skill has no capability for command execution, file system modification, or network requests. It only generates text/markup fragments.
- Sanitization: The agent is explicitly instructed to use only elements and attributes allowed by ArcGIS Online's supported HTML/CSS allowlists and to escape special characters for safety.
Audit Metadata