photoshop-setup
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/check_environment.pyscript executes system commands such astasklistandpgrepto detect the presence of Adobe Photoshop processes. - [EXTERNAL_DOWNLOADS]: The
scripts/install_package.pyutility uses the Python package manager to download and install thedcc-mcp-photoshoppackage. The package belongs to the skill's vendor infrastructure. - [COMMAND_EXECUTION]: The skill invokes the
pipCLI tool via subprocess calls inscripts/install_package.pyto manage library installations and upgrades. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input through parameters that influence file writes and command arguments.
- Ingestion points: Input parameters such as
server_name,gateway_url,version, andsource_pathinscripts/configure_mcp_client.pyandscripts/install_package.py. - Boundary markers: None identified; inputs are used directly in file paths, configuration values, and shell command arguments.
- Capability inventory: The skill has the capability to write to local configuration files (Claude Desktop and VS Code settings) and execute package installation commands via
pip. - Sanitization: No explicit sanitization or validation of input parameters is performed before their use in configuration updates or command execution.
Audit Metadata