canvas-setup

SUSPICIOUS. The skill's stated purpose mostly matches its behavior: local workspace creation, bridge health checks, and integration detection are coherent. The main concerns are medium install/execution trust from opaque bundled shell scripts and an optional transitive installation of a vendor agent skill into a proprietary desktop-app ecosystem. No clear credential harvesting, exfiltration endpoint, or purpose-incompatible capability is visible, but the unverifiable local scripts and transitive trust chain keep it above benign.