canva-known-pitfalls
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a best-practice guide for Canva API integrations, offering code examples that compare incorrect implementations with recommended secure and efficient approaches.
- [SAFE]: The content includes proactive security advice, specifically warning against exposing OAuth client secrets in client-side code and emphasizing the importance of validating webhook signatures using JWK verification.
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or obfuscated content were detected in the instructions or examples.
- [SAFE]: All external resources and documentation links refer to the official Canva developer portal, which is a trusted and well-known service.
Audit Metadata