Atom

Security Modes

Atom always keeps raw ExtendScript available because it is the foundation of project automation in the Adobe app. Security modes control the agent’s separate shell and general file tools.

For true isolation, use a virtual machine or a separate computer. Atom’s security modes reduce access, but they do not isolate the agent from the rest of your system.

Open Settings → Security to choose a mode. Project Folder is the default.

Adobe Only

Atom can inspect and change the open Adobe project, including writing and running raw ExtendScript. The agent cannot use shell commands or general file tools.

This is the most restricted mode, but it is not a complete sandbox. ExtendScript runs inside the Adobe application and may still use capabilities provided by that host.

Project Folder

Project Folder includes everything in Adobe Only and adds shell commands plus read and write access inside the folder containing the saved Adobe project. The project must be saved before this mode can start.

Atom limits its project-folder file tools to that folder. Where the selected agent supports sandboxing, command writes are also limited to that folder. The agent’s unrestricted file tools remain unavailable.

Project Folder is a guardrail, not complete isolation. On native Windows, Claude commands are not sandboxed: they start in the saved project folder and are instructed to stay there, but can technically access the rest of the computer. Atom shows a warning when such a session starts.

Full Access

Full Access preserves Atom’s unrestricted workflow. The agent can run shell commands and use any files available to your operating-system account, in addition to controlling the Adobe application through raw ExtendScript.

Use this mode when the task requires installing packages, running local utilities, or working across folders.

Premiere security controls

Use Adobe Only when Atom should work only through Premiere’s project automation. Use Project Folder when it also needs commands or files beside the saved project, and use Full Access only when the task requires broader command or file access.

Raw ExtendScript remains available in every mode and can inspect, change, or save the open Premiere project.

What Security Modes Do Not Change

  • Raw ExtendScript remains available in every mode.
  • Atom’s dedicated Adobe project tools remain available.
  • The selected AI provider receives your prompts, chat context, Adobe project information returned to the agent, and files you explicitly attach.
  • Adobe may continue creating project saves, autosaves, caches, previews, and renders as part of normal application behavior.
  • External agents connected through MCP Mode have their own permissions. Atom’s built-in-chat security mode does not configure those external applications.

If a conversation is already open when you change modes, Atom reconnects the agent before the next action so the new access level applies.