photopea-embedded-editor
Enables embedding of Photopea in web applications, allowing for advanced image editing capabilities directly within the app.
Install this skill
Security score
The photopea-embedded-editor skill was audited on Jun 10, 2026 and we found 23 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 251 | await pea.runScript(`app.open(${imageUrlLiteral}, null, true);`); |
Template literal with variable interpolation in command context
| 312 | await pea.runScript(` |
Fetch to external URL
| 198 | const buf = await (await fetch("https://example.com/MyFont.otf")).arrayBuffer(); |
Fetch to external URL
| 203 | await pea.loadAsset(await (await fetch("Nature.ABR")).arrayBuffer()); |
Fetch to external URL
| 206 | await pea.loadAsset(await (await fetch("Gradients.GRD")).arrayBuffer()); |
Fetch to external URL
| 221 | const buf = await (await fetch("https://my-assets.com/sticker.png")).arrayBuffer(); |
External URL reference
| 35 | npm package: https://www.npmjs.com/package/photopea |
External URL reference
| 41 | <script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/photopea.min.js"></script> |
External URL reference
| 80 | <script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/photopea.min.js"></script> |
External URL reference
| 114 | await pea.openFromURL("https://example.com/design.psd", false); |
External URL reference
| 117 | await pea.openFromURL("https://example.com/overlay.png", true); |
External URL reference
| 198 | const buf = await (await fetch("https://example.com/MyFont.otf")).arrayBuffer(); |
External URL reference
| 221 | const buf = await (await fetch("https://my-assets.com/sticker.png")).arrayBuffer(); |
External URL reference
| 231 | "url": "https://my-plugin.example.com", |
External URL reference
| 232 | "icon": "===https://my-plugin.example.com/icon.png" |
External URL reference
| 288 | <script src="https://cdn.jsdelivr.net/npm/[email protected]/dist/photopea.min.js"></script> |
External URL reference
| 309 | await pea.openFromURL("https://example.com/card.psd", false); |
External URL reference
| 1313 | app.open("https://example.com/watermark.png", null, true); |
External URL reference
| 1399 | - npm: https://www.npmjs.com/package/photopea |
External URL reference
| 1400 | - Photopea Live Messaging API: https://www.photopea.com/api/live |
External URL reference
| 1401 | - Photopea Script reference: https://www.photopea.com/learn/scripts |
External URL reference
| 1402 | - Photoshop JS Scripting reference (compatible): https://theiviaxx.github.io/photoshop-docs/Photoshop/index.html |
External URL reference
| 1403 | - Plugin dev gists (addImageAndWait, getDocumentAsImage): https://gist.github.com/yikuansun/c0f1a602b4e9d4e344a41c4f49ded3bf |