The Agent Skills Directory

[COMMAND_EXECUTION]: Dynamic method resolution in scripts/apply_filter.py. The apply_filter tool uses the getattr function to dynamically resolve and call methods on the Photoshop layer.filters object using the user-provided method string argument. This pattern allows for the execution of arbitrary methods within the Photoshop filter namespace.
[PROMPT_INJECTION]: Indirect prompt injection surface in scripts/apply_filter.py. The tool processes untrusted data (the method parameter) and uses it to determine which Photoshop command to execute. The lack of an explicit allowlist or validation check against a set of known-safe filter names creates a surface where an attacker-influenced prompt could cause the agent to invoke unintended or harmful API functions within the active Photoshop session.

photoshop-filter