The Agent Skills Directory

[DYNAMIC_EXECUTION]: The execute_script tool in scripts/execute_script.py enables the execution of arbitrary JavaScript/UXP code within the Adobe Photoshop environment via the app.eval_js(code) method.
[REMOTE_CODE_EXECUTION]: The tool provides a sink for arbitrary script execution where the code parameter, potentially influenced by external data or prompt injection, is executed without validation.
[INDIRECT_PROMPT_INJECTION]: The skill exposes a capability that can be exploited if the agent processes malicious instructions from external sources and passes them to the scripting tool.
Ingestion points: The code parameter of the execute_script function in scripts/execute_script.py.
Boundary markers: None; the tool accepts raw strings for execution in the UXP environment.
Capability inventory: Photoshop's UXP environment has capabilities including filesystem access and network requests depending on host application permissions.
Sanitization: No input validation or code sanitization is performed on the provided script before execution.

photoshop-script