edit-premiere-project
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the
adobe-premiere-pro-mcppackage globally usingnpm install -g. This package is sourced from the public NPM registry and is not associated with a verified or trusted organization. The use of a well-known brand name without official scoping is a common indicator of a non-standard or potentially deceptive package. - [COMMAND_EXECUTION]: The instructions direct the execution of
premiere-pro-mcp --install-cepafter installation. This command performs local system modifications by installing a CEP extension, which is an unverified action originating from an external source. - [INDIRECT_PROMPT_INJECTION]: The skill processes project state, clip information, and sequence data from Adobe Premiere Pro projects.
- Ingestion points: The skill reads project and sequence states via the MCP server as described in
SKILL.md. - Boundary markers: There are no delimiters or explicit instructions to ignore potentially malicious embedded content within the project data.
- Capability inventory: The skill has the ability to mutate projects, edit sequences, and perform exports.
- Sanitization: No sanitization or validation steps are mentioned for the data ingested from the external Premiere project environment.
Audit Metadata