canva-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides legitimate developer environment setup instructions.
- [CREDENTIALS_UNSAFE]: The skill uses placeholders for sensitive environment variables (CANVA_CLIENT_ID, CANVA_CLIENT_SECRET) and correctly instructs the user to store them in a git-ignored .env.local file, which is a security best practice. Benign test tokens are used in mock integration tests.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and repositories from Canva and well-known development tools like MSW and ngrok. These are standard resources for the intended development workflow.
Audit Metadata