photoshop-script

Warn

Audited by Socket on Jul 26, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/execute_script.py

This module is a thin wrapper that executes caller-provided JavaScript in Adobe Photoshop via `eval_js` and returns the resulting value. The Python code itself shows no explicit credential theft or network exfiltration, but it exposes a capability/abuse risk: unrestricted unvalidated dynamic execution in a powerful host application environment, with results returned to the caller and no in-module policy enforcement.

Confidence: 66%Severity: 60%
Audit Metadata
Analyzed At
Jul 26, 2026, 08:41 AM
Package URL
pkg:socket/skills-sh/dcc-mcp%2Fdcc-mcp-photoshop%2Fphotoshop-script%2F@b6e72f8bc31c375535271fb67c18ec8166e0e6e51ab89422f6ebc49eae0bdcd5