Security audit
Canva
Security checks for vulnerabilities and agentic risk
Overview
This package is a thin Canva MCP integration that connects through Canva OAuth and does not include local skill instructions or executable code.
Install this only if you want OpenClaw to connect to your Canva account. The wrapper looks coherent and minimal, but Canva's remote MCP service may be able to create or modify designs according to the permissions granted during OAuth.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.