adobe-photoshop-web

Fail

Audited by Socket on Feb 28, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill enables Photoshop Web automation via browser control with credential-based login and optional manual login flow. However, the installation method (external curl | bash), credential handling without explicit at-rest protection details, and automated 2FA handling introduce significant security risks. To improve security, pin or verify installers against trusted sources, implement token-based authentication where feasible, enforce strict secret management with least-privilege access, and formalize user consent and auditing for automated actions.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Feb 28, 2026, 03:40 AM
Package URL
pkg:socket/skills-sh/NeverSight%2Fskills_feed%2Fadobe-photoshop-web%2F@abc3c3e3b64751ea7bb1a118825fc1113f431fd8