canva-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard, best-practice implementation patterns for API rate limit management without any detected malicious intent or dangerous command execution.
- [DATA_EXPOSURE]: The instructions explicitly require the redaction of sensitive data, including API tokens, design content, and user-identifying details, from the agent's output and logs.
- [EXTERNAL_DOWNLOADS]: The skill references 'p-queue', a well-known and widely used Node.js library for concurrency and rate limiting, which is a standard development practice.
- [INDIRECT_PROMPT_INJECTION]: While the skill logic ingests data from external API headers (such as 'Retry-After'), the processing is restricted to numeric parsing (parseInt), which effectively mitigates the risk of prompt injection from the API response headers.
Audit Metadata