Skip to main content

canva-architecture-variants

Provides architecture blueprints for implementing Canva Connect API integrations, optimizing for various scales and user needs.

Install this skill

or
82/100

Security score

The canva-architecture-variants skill was audited on May 19, 2026 and we found 6 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 105

Template literal with variable interpolation in command context

SourceSKILL.md
105const cached = await this.cache.get(`export:${designId}:${JSON.stringify(format)}`);
medium line 128

Template literal with variable interpolation in command context

SourceSKILL.md
128const poll = await canva.request(`/exports/${result.id}`);
low line 157

Webhook reference - potential data exfiltration

SourceSKILL.md
157│ │ └── webhook.worker.ts
medium line 169

Webhook reference - potential data exfiltration

SourceSKILL.md
169- Separate workers for exports, autofills, webhooks
low line 216

External URL reference

SourceSKILL.md
216- [Canva API Reference](https://www.canva.dev/docs/connect/api-reference/)
low line 217

External URL reference

SourceSKILL.md
217- [Monolith First](https://martinfowler.com/bliki/MonolithFirst.html)
Scanned on May 19, 2026
View Security Dashboard
Installation guide →