skills/new-career-begin/queryweaver/canva-automation/Socket

canva-automation

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s Canva automation purpose is coherent, but it relies on an intermediary MCP service that appears deprecated and routes Canva authorization/data through a third party rather than Canva’s official MCP. This is not confirmed malware, but the outdated hosted dependency and indirect data flow create medium security risk.

Confidence: 87%Severity: 58%

Audit Metadata

Analyzed At

Sep 4, 2026, 03:05 PM

Package URL

pkg:socket/skills-sh/new-career-begin%2Fqueryweaver%2Fcanva-automation%2F@18768a5c3434afae74ea3e272a68b997524cd349b178deb72daead380fe058ec