adobe-photoshop-web
Fail
Audited by Socket on Feb 28, 2026
1 alert found:
MalwareMalwareSKILL.md
HIGHMalwareHIGH
SKILL.md
The skill enables Photoshop Web automation via browser control with credential-based login and optional manual login flow. However, the installation method (external curl | bash), credential handling without explicit at-rest protection details, and automated 2FA handling introduce significant security risks. To improve security, pin or verify installers against trusted sources, implement token-based authentication where feasible, enforce strict secret management with least-privilege access, and formalize user consent and auditing for automated actions.
Confidence: 95%Severity: 90%
Audit Metadata