canva-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code snippets for Canva OAuth integration using PKCE, which is a secure standard for public clients.
- [DATA_EXPOSURE]: The skill does not contain hardcoded credentials. It uses appropriate placeholders like 'OCAxxxxxxxxxxxxxxxx' and explicitly instructs the user to add secret-containing files to
.gitignoreto prevent accidental credential leakage. - [EXTERNAL_DOWNLOADS]: All network operations described in the code snippets target official Canva domains (
api.canva.comandwww.canva.com) for the purpose of authentication and API verification.
Audit Metadata