json-canvas
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill provides utility scripts to generate and validate JSON Canvas files based on the official specification. The code uses standard Node.js built-in modules (fs, path, crypto) for its operations.
- [COMMAND_EXECUTION]: The documentation describes how to use local Node.js scripts to generate or validate files. These scripts handle file system operations (reading/writing) based on user-provided input paths but do not execute arbitrary shell commands or external processes.
- [REMOTE_CODE_EXECUTION]: All logic is contained within the local JavaScript files provided. There are no patterns of fetching or executing code from remote servers.
- [DATA_EXPOSURE]: The skill does not access sensitive system files or credentials. Its operations are restricted to the creation and validation of .canvas files.
Audit Metadata