json-canvas
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-only resource that defines the structure and validation rules for the .canvas file format. It does not include any scripts, shell commands, or automated tasks.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and open-source repositories for the JSON Canvas specification (jsoncanvas.org and github.com/obsidianmd). These are well-known resources related to the Obsidian ecosystem and are used here for legitimate reference purposes.
- [DATA_EXPOSURE]: While the JSON Canvas format supports 'file' nodes that reference local file paths, this is a feature of the data format for linking attachments within a workspace (e.g., in Obsidian). The skill does not contain instructions to exfiltrate these files or access sensitive system areas.
Audit Metadata