adobe-express-core — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited adobe-express-core (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill explains the Adobe Express development environment, the two-runtime architecture that makes it different from web development, and how to set up your development tools including the essential MCP servers.
To enable AI-powered documentation, code completion, and manifest validation, you must connect your IDE to the official Adobe Express MCP server.
Agent instruction: Run the setup script directly. Do not stop at instructions-only output.
In your project root, run:
node skills/adobe-express-core/scripts/setup-mcp-servers.mjs --target <your-ide>Replace <your-ide> with one of: copilot, cursor, windsurf, continue, claude, vscode, antigravity, or all (for all supported IDEs).
.copilot/mcp.json, .cursor/mcp.json, etc.) with the official Adobe Express MCP server entry.This ensures the MCP server connection is detected.
If you prefer to configure your IDE manually, see MCP Setup and Installation for step-by-step instructions on editing your IDE’s config files and adding the MCP server entry by hand.
Use MCP as your first source for Adobe Express facts, APIs, examples, and type definitions. Avoid duplicating long documentation in this skill.
express-document-sdk: document operationsadd-on-sdk-document-sandbox: iframe/sandbox communicationiframe-ui: panel-side UI/runtime APIsUse explicit instructions so your agent calls MCP instead of guessing.
mcp_adobe-express_get_relevant_documentations for Adobe Express guidance before coding."mcp_adobe-express_get_typedefinitions with api_type=express-document-sdk, then generate TypeScript code."If your host supports tool tags, you can also call with hash-style hints:
#mcp_adobe-express_get_relevant_documentations Find how to add text to the document#mcp_adobe-express_get_typedefinitions api_type=iframe-uiAdobe Express add-ons run in a controlled host environment, not a normal web page. This creates architectural rules that directly affect how you design and debug features.
manifest.json and enforced by Express.manifest.json as source of truth for enabled features and permissions.For runtime implementation details, query MCP first, then use adobe-express-document-manipulation skill.
Two proven paths exist for setting up your first add-on project:
@adobe/create-ccweb-add-on)Official tool from Adobe with multiple templates to choose from:
See Project Setup Guide for detailed instructions and template comparison.
Community-built boilerplate with enhanced developer experience:
Why consider Bolt Express? If you want faster development cycles with hot reloading, built-in TypeScript support, and less configuration overhead, Bolt Express is worth evaluating.
See Project Setup Guide for Bolt Express quick start and feature comparison.
Once you understand the architecture, route specific tasks to specialized skills:
| Task Type | Route To | When |
|---|---|---|
| UI components, panel layout, UX patterns | adobe-express-spectrum-ui-ux | Designing interfaces or reviewing UX |
| Insert shapes, text, images, audio, video | adobe-express-document-manipulation | Creating or modifying document content |
| OAuth login, token storage, cloud provider setup | adobe-express-oauth-authentication | Connecting to external services |
| Subscriptions, checkout flows, entitlements | adobe-express-monetization | Monetizing features or billing |
| Architecture decisions, manifest, MCP setup | adobe-express-core (this skill) | Planning overall add-on structure |
Setup:
External Resources:
Next Steps: Configure MCP → Choose project setup path → Use specialized skills for specific tasks
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.