canvas-capture-extension

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script rebuild-extension.sh executes local build commands using bun run make. This is the primary purpose of the skill and is performed within a directory verified to contain the expected extension source code.- [SAFE]: The skill operates entirely on the local file system, copying files from a build directory to a local application directory. It does not perform any network operations or external data exfiltration.- [SAFE]: The instructions and scripts use hardcoded absolute paths specific to a developer environment (e.g., /Users/jonathanburger/). While these paths are non-portable, they do not present a security risk to the user executing the skill in their own environment.- [SAFE]: No prompt injection patterns, obfuscation techniques, or persistence mechanisms were identified in the analyzed files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:02 AM
Security Audit — agent-trust-hub — canvas-capture-extension