Security audit
Security checks across malware telemetry and agentic risk
This appears to be a legitimate Canva integration, but it should be reviewed because it stores OAuth tokens and can delete Canva designs or assets without strong safeguards.
Install only if you are comfortable granting this skill Canva account access, storing refreshable tokens locally, uploading selected files to Canva, and allowing commands that can delete Canva content. Treat delete operations as requiring explicit user confirmation outside the skill, and revoke the Canva integration or run auth logout when access is no longer needed.
;;
delete)
local id="$1"
api_request DELETE "/v1/designs/$id"
echo -e "${GREEN}Design moved to trash${NC}"
;;
*);;
delete)
local id="$1"
api_request DELETE "/v1/assets/$id"
echo -e "${GREEN}Asset deleted${NC}"
;;
*)66/66 vendors flagged this skill as clean.
No suspicious patterns detected.