canva-architecture-variants
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill serves as a documentation resource for developers, providing validated design patterns (monolith, service layer, microservice) for Canva integrations.
- [EXTERNAL_DOWNLOADS]: Mentions the official Canva Connect API starter kit on GitHub (github.com/canva-sdks/canva-connect-api-starter-kit) as a development resource.
- [CREDENTIALS_UNSAFE]: The documentation explicitly recommends secure token management, including the use of encrypted databases (PostgreSQL) or specialized secrets management tools (HashiCorp Vault or KMS) rather than hardcoding secrets.
- [COMMAND_EXECUTION]: Provides illustrative TypeScript code snippets for application routes and background workers that demonstrate intended system design without executing arbitrary or malicious shell commands.
Audit Metadata