canva-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script and TypeScript diagnostic logic that uses curl, tar, and grep to test API reachability and package logs. These tools are restricted via allowed-tools configuration to ensure they are only used for the intended troubleshooting purposes.
- [SAFE]: All external network requests are directed to api.canva.com, which is a well-known service. The skill safely handles authentication by retrieving tokens from environment variables rather than hardcoding them, and it utilizes binary checks to confirm token presence without exposing the actual secrets in logs.
Audit Metadata