arcgis-editing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly loads and interacts with external ArcGIS service URLs (e.g., FeatureLayer/VersionManagementService at "https://services.arcgis.com/.../FeatureServer/0" and "https://services.arcgis.com/.../VersionManagementServer"), queries attachments/related features and reads subtype/version info from those public services—untrusted third-party content that the agent consumes can affect form templates, validation, versioning decisions, and edit actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The examples load and execute remote JavaScript from the ArcGIS CDN (e.g., https://js.arcgis.com/4.34/), which is a runtime dependency that fetches and executes external code required for the skill to function.