create-canvas
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard development procedures for GitHub Copilot extensions using the official SDK.
- [PROMPT_INJECTION]: The instructions include a safety-conscious warning regarding
systemMessageconfiguration, advising authors to avoid modes that would disable platform-managed safety filters. - [COMMAND_EXECUTION]: The skill leverages integrated platform tools (
extensions_manage) for scaffolding and managing local extension code, which is consistent with its role as a developer utility. - [DATA_EXPOSURE]: The provided templates for data storage encourage using appropriate scopes (session, user, or workspace) and provide guidance on where to store artifacts securely.
Audit Metadata