Skip to main content

canva-performance-tuning

Enhances Canva Connect API performance through caching, pagination, and optimized request handling for better integration efficiency.

Install this skill

or
57/100

Security score

The canva-performance-tuning skill was audited on May 30, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 48

Template literal with variable interpolation in command context

SourceSKILL.md
48const data = await canvaAPI(`/designs/${designId}`, token);
medium line 104

Template literal with variable interpolation in command context

SourceSKILL.md
104const data = await canvaAPI(`/designs?${params}`, token);
medium line 116

Template literal with variable interpolation in command context

SourceSKILL.md
116console.log(`${design.title} (${design.id})`);
medium line 129

Template literal with variable interpolation in command context

SourceSKILL.md
129const { job } = await canvaAPI(`/exports/${exportId}`, token);
medium line 132

Template literal with variable interpolation in command context

SourceSKILL.md
132if (job.status === 'failed') throw new Error(`Export failed: ${job.error?.message}`);
medium line 186

Template literal with variable interpolation in command context

SourceSKILL.md
186headers: { 'Authorization': `Bearer ${token}` },
medium line 203

Template literal with variable interpolation in command context

SourceSKILL.md
203console.log(`[canva] ${operation}: ${ms}ms OK`);
medium line 207

Template literal with variable interpolation in command context

SourceSKILL.md
207console.error(`[canva] ${operation}: ${ms}ms FAIL`, error);
low line 185

Fetch to external URL

SourceSKILL.md
185const res = await fetch('https://api.canva.com/rest/v1/designs', {
low line 64

Access to .env file

SourceSKILL.md
64const redis = new Redis(process.env.REDIS_URL);
low line 185

External URL reference

SourceSKILL.md
185const res = await fetch('https://api.canva.com/rest/v1/designs', {
Scanned on May 30, 2026
View Security Dashboard
Installation guide →