photoshop-setup

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/check_environment.py script executes system commands such as tasklist and pgrep to detect the presence of Adobe Photoshop processes.
  • [EXTERNAL_DOWNLOADS]: The scripts/install_package.py utility uses the Python package manager to download and install the dcc-mcp-photoshop package. The package belongs to the skill's vendor infrastructure.
  • [COMMAND_EXECUTION]: The skill invokes the pip CLI tool via subprocess calls in scripts/install_package.py to manage library installations and upgrades.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input through parameters that influence file writes and command arguments.
  • Ingestion points: Input parameters such as server_name, gateway_url, version, and source_path in scripts/configure_mcp_client.py and scripts/install_package.py.
  • Boundary markers: None identified; inputs are used directly in file paths, configuration values, and shell command arguments.
  • Capability inventory: The skill has the capability to write to local configuration files (Claude Desktop and VS Code settings) and execute package installation commands via pip.
  • Sanitization: No explicit sanitization or validation of input parameters is performed before their use in configuration updates or command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 01:49 PM