canva-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing documentation and TypeScript code examples for developers to implement application-level access control for the Canva Connect API.
- [EXTERNAL_DOWNLOADS]: The skill references official Canva developer documentation and API endpoints (api.canva.com). These are well-known services and the references are used neutrally for integration guidance.
- [CREDENTIALS_UNSAFE]: The code samples correctly demonstrate the use of environment variables (process.env.CANVA_CLIENT_ID) and the PKCE flow for OAuth, which are recommended security practices for secret management and authentication.
Audit Metadata