Skip to main content

adobe-core-workflow-a

Automates image generation and creative workflows using Adobe Firefly APIs for marketing and design purposes.

Install this skill

or
37/100

Security score

The adobe-core-workflow-a skill was audited on May 19, 2026 and we found 23 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 85

Template literal with variable interpolation in command context

SourceSKILL.md
85'Authorization': `Bearer ${token}`,
medium line 94

Template literal with variable interpolation in command context

SourceSKILL.md
94throw new Error(`Firefly generate failed (${response.status}): ${err}`);
medium line 111

Template literal with variable interpolation in command context

SourceSKILL.md
111'Authorization': `Bearer ${token}`,
medium line 123

Template literal with variable interpolation in command context

SourceSKILL.md
123console.log(`Firefly async job: ${jobId}`);
medium line 131

Template literal with variable interpolation in command context

SourceSKILL.md
131'Authorization': `Bearer ${token}`,
medium line 139

Template literal with variable interpolation in command context

SourceSKILL.md
139if (result.status === 'failed') throw new Error(`Async generation failed: ${result.error}`);
medium line 158

Template literal with variable interpolation in command context

SourceSKILL.md
158'Authorization': `Bearer ${token}`,
medium line 170

Template literal with variable interpolation in command context

SourceSKILL.md
170if (!response.ok) throw new Error(`Fill failed: ${response.status}`);
medium line 190

Template literal with variable interpolation in command context

SourceSKILL.md
190'Authorization': `Bearer ${token}`,
medium line 202

Template literal with variable interpolation in command context

SourceSKILL.md
202if (!response.ok) throw new Error(`Expand failed: ${response.status}`);
low line 82

Fetch to external URL

SourceSKILL.md
82const response = await fetch('https://firefly-api.adobe.io/v3/images/generate', {
low line 108

Fetch to external URL

SourceSKILL.md
108const response = await fetch('https://firefly-api.adobe.io/v3/images/generate-async', {
low line 155

Fetch to external URL

SourceSKILL.md
155const response = await fetch('https://firefly-api.adobe.io/v3/images/fill', {
low line 187

Fetch to external URL

SourceSKILL.md
187const response = await fetch('https://firefly-api.adobe.io/v3/images/expand', {
low line 86

Access to .env file

SourceSKILL.md
86'x-api-key': process.env.ADOBE_CLIENT_ID!,
low line 112

Access to .env file

SourceSKILL.md
112'x-api-key': process.env.ADOBE_CLIENT_ID!,
low line 132

Access to .env file

SourceSKILL.md
132'x-api-key': process.env.ADOBE_CLIENT_ID!,
low line 159

Access to .env file

SourceSKILL.md
159'x-api-key': process.env.ADOBE_CLIENT_ID!,
low line 191

Access to .env file

SourceSKILL.md
191'x-api-key': process.env.ADOBE_CLIENT_ID!,
low line 82

External URL reference

SourceSKILL.md
82const response = await fetch('https://firefly-api.adobe.io/v3/images/generate', {
low line 108

External URL reference

SourceSKILL.md
108const response = await fetch('https://firefly-api.adobe.io/v3/images/generate-async', {
low line 155

External URL reference

SourceSKILL.md
155const response = await fetch('https://firefly-api.adobe.io/v3/images/fill', {
low line 187

External URL reference

SourceSKILL.md
187const response = await fetch('https://firefly-api.adobe.io/v3/images/expand', {
Scanned on May 19, 2026
View Security Dashboard
Installation guide →