adobe-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured error responses from external Adobe API endpoints, which could theoretically contain malicious instructions.
- Ingestion points: Adobe API response bodies and error messages processed during troubleshooting steps in
SKILL.md. - Boundary markers: Not explicitly defined; the skill presents findings for user review and manual intervention.
- Capability inventory: The skill utilizes
Bash(viacurl) for network requests and status verification. - Sanitization: Relies on manual user validation of command output and suggested fixes.
- [EXTERNAL_DOWNLOADS]: Fetches real-time service incident reports from Adobe's official status monitoring API.
- The skill provides a command to retrieve status data from
status.adobe.com. This uses an established service and is standard for operational visibility. - [COMMAND_EXECUTION]: Provides validated command templates for common integration tasks.
- Includes
curltemplates for OAuth 2.0 token generation using Adobe's Identity Management Services (IMS). - Utilizes
nslookupfor network connectivity diagnostics targeting official Adobe domains likefirefly-api.adobe.ioandpdf-services.adobe.io. - Securely handles credentials by referencing environment variables (e.g.,
${ADOBE_CLIENT_ID}) rather than hardcoding sensitive values. - [REMOTE_CODE_EXECUTION]: The skill includes a pipe to Python (
python3 -m json.tool) which was flagged by automated scanners. Analysis confirms this is not remote code execution; it is the use of a standard built-in Python module to pretty-print JSON output for human readability.
Audit Metadata