canva-hello-world

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Communicates with the official Canva API at api.canva.com. Canva is a well-known technology service, and the interaction follows official documentation patterns.
  • [CREDENTIALS_UNSAFE]: Instructions correctly advise retrieving the access token from an environment variable (process.env.CANVA_ACCESS_TOKEN), which is a standard security best practice for managing secrets in code. No hardcoded credentials were found.
  • [COMMAND_EXECUTION]: The skill uses the Read, Write, and Edit tools to manage local files for the development example. This is consistent with its stated purpose of creating a code integration.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 12:02 AM
Security Audit — agent-trust-hub — canva-hello-world