canvas-capture-extension
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
rebuild-extension.shexecutes local build commands usingbun run make. This is the primary purpose of the skill and is performed within a directory verified to contain the expected extension source code.- [SAFE]: The skill operates entirely on the local file system, copying files from a build directory to a local application directory. It does not perform any network operations or external data exfiltration.- [SAFE]: The instructions and scripts use hardcoded absolute paths specific to a developer environment (e.g.,/Users/jonathanburger/). While these paths are non-portable, they do not present a security risk to the user executing the skill in their own environment.- [SAFE]: No prompt injection patterns, obfuscation techniques, or persistence mechanisms were identified in the analyzed files.
Audit Metadata