Skip to main content

canva-observability

Sets up observability for Canva API integrations, enabling tracking of metrics, traces, and alerts for enhanced monitoring.

Install this skill

or
86/100

Security score

The canva-observability skill was audited on May 19, 2026 and we found 6 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 99

Template literal with variable interpolation in command context

SourceSKILL.md
99const status = res.ok ? 'success' : `error_${res.status}`;
medium line 128

Template literal with variable interpolation in command context

SourceSKILL.md
128return tracer.startActiveSpan(`canva.${operationName}`, async (span) => {
low line 152

Access to .env file

SourceSKILL.md
152const logger = pino({ name: 'canva', level: process.env.LOG_LEVEL || 'info' });
low line 255

External URL reference

SourceSKILL.md
255- [Canva API Reference](https://www.canva.dev/docs/connect/api-reference/)
low line 256

External URL reference

SourceSKILL.md
256- [Prometheus](https://prometheus.io/docs/practices/naming/)
low line 257

External URL reference

SourceSKILL.md
257- [OpenTelemetry](https://opentelemetry.io/docs/)
Scanned on May 19, 2026
View Security Dashboard
Installation guide →