photoshop-python-api-mcp-server

The server's core functionality involves executing JavaScript (ExtendScript) commands within Adobe Photoshop via COM interfaces, and opening/saving files based on provided paths. While this is the intended purpose, it means the server has extensive control over Photoshop and the local file system. The `execute_javascript` method attempts to wrap scripts in `try-catch` and disable dialogs for stability, and text inputs are sanitized. No obvious hardcoded secrets, 'eval' calls (other than the inherent ExtendScript execution in Photoshop), or arbitrary network listeners were found. The primary security consideration is that an AI assistant, if compromised or misused, could instruct Photoshop to perform actions (e.g., file manipulation) with the user's privileges.