canva-automation

SUSPICIOUS. The capability matches Canva automation, but the skill routes OAuth-backed Canva access through a third-party intermediary and depends on a reportedly discontinued remote MCP endpoint instead of Canva's official MCP server. This is not confirmed malware, but it presents high trust and data-flow risk for an AI agent skill.