canva-webhooks-events
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive and secure implementation guidelines for handling Canva webhooks.
- [SAFE]: Correctly implements cryptographic signature verification using JSON Web Keys (JWK) from the official Canva API endpoint (api.canva.com).
- [SAFE]: Promotes security best practices such as idempotency checks using Redis, asynchronous event processing to prevent timeouts, and the principle of least privilege regarding API scopes.
- [SAFE]: Recommends standard, well-maintained libraries such as
josefor JWT handling andioredisfor state management.
Audit Metadata