canvas-designer

SUSPICIOUS: the skill’s stated purpose broadly matches its canvas/media capabilities, and it does not overtly seek credentials or use obvious malicious installers. However, the real execution and data-routing backend is opaque and unverifiable, and it processes external/reference content that can influence later tool actions. Risk is moderate due to trust opacity and indirect content-following, not confirmed malware.