photoshop-script
Warn
Audited by Socket on Jul 26, 2026
1 alert found:
AnomalyAnomalyscripts/execute_script.py
LOWAnomalyLOW
scripts/execute_script.py
This module is a thin wrapper that executes caller-provided JavaScript in Adobe Photoshop via `eval_js` and returns the resulting value. The Python code itself shows no explicit credential theft or network exfiltration, but it exposes a capability/abuse risk: unrestricted unvalidated dynamic execution in a powerful host application environment, with results returned to the caller and no in-module policy enforcement.
Confidence: 66%Severity: 60%
Audit Metadata