photopea-embedded-editor
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
photopea.jslibrary from well-known sources including the npm registry and the jsDelivr CDN. - [COMMAND_EXECUTION]: Provides standard installation instructions for the
photopeapackage using the npm package manager. - [REMOTE_CODE_EXECUTION]: Uses the
pea.runScript()method to execute JavaScript within the embedded Photopea environment. The documentation correctly identifies injection risks and provides instructions for sanitizing dynamic values using JSON serialization. - [DATA_EXFILTRATION]: Provides standard methods for opening remote URLs and exporting image data (Blobs) within the application context. No unauthorized data transfer or exfiltration patterns were identified.
Audit Metadata