Skip to main content

adobe-policy-guardrails

Automates Adobe-specific policy enforcement with lint rules and CI checks for secure integration and content compliance.

Install this skill

or
67/100

Security score

The adobe-policy-guardrails skill was audited on May 19, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 119

Template literal with variable interpolation in command context

SourceSKILL.md
119violations.push(`[${rule.name}] ${rule.message}`);
medium line 180

Template literal with variable interpolation in command context

SourceSKILL.md
180throw new Error(`PDF Services quota exhausted (${this.monthlyLimit} transactions/month)`);
medium line 184

Template literal with variable interpolation in command context

SourceSKILL.md
184console.warn(`PDF Services: ${status.remaining - 1} transactions remaining this month`);
medium line 206

Template literal with variable interpolation in command context

SourceSKILL.md
206console.warn(`Adobe scope warning: ${violations.join(', ')} should not be in development`);
medium line 214

Template literal with variable interpolation in command context

SourceSKILL.md
214throw new Error(`Adobe required scopes missing: ${missing.join(', ')}`);
medium line 232

Template literal with variable interpolation in command context

SourceSKILL.md
232throw new Error(`BLOCKED: ${BLOCKED_IN_PROD[operation]}`);
low line 67

Access to .env file

SourceSKILL.md
67if grep -rE "[A-F0-9]{24}@AdobeOrg" --include="*.ts" --include="*.js" --include="*.json" . 2>/dev/null | grep -v node_modules | grep -v '.git' | grep -v '.env.example'; then
low line 190

Access to .env file

SourceSKILL.md
190process.env.ADOBE_PDF_TIER === 'paid' ? 'paid' : 'free'
low line 230

Access to .env file

SourceSKILL.md
230const isProd = process.env.NODE_ENV === 'production';
Scanned on May 19, 2026
View Security Dashboard
Installation guide →