canva-sdk-patterns
Provides production-ready patterns for integrating with the Canva Connect API using TypeScript, enhancing API client development.
Install this skill
Security score
The canva-sdk-patterns skill was audited on May 30, 2026 and we found 16 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 68 | const res = await fetch(`${CanvaClient.BASE}${path}`, { |
Template literal with variable interpolation in command context
| 71 | 'Authorization': `Bearer ${this.tokens.accessToken}`, |
Template literal with variable interpolation in command context
| 92 | `${this.config.clientId}:${this.config.clientSecret}` |
Template literal with variable interpolation in command context
| 95 | const res = await fetch(`${CanvaClient.BASE}/oauth/token`, { |
Template literal with variable interpolation in command context
| 98 | 'Authorization': `Basic ${basicAuth}`, |
Template literal with variable interpolation in command context
| 123 | async getDesign(id: string) { return this.request(`/designs/${id}`); } |
Template literal with variable interpolation in command context
| 124 | async listDesigns(params?: URLSearchParams) { return this.request(`/designs?${params || ''}`); } |
Template literal with variable interpolation in command context
| 126 | async getExport(id: string) { return this.request(`/exports/${id}`); } |
Template literal with variable interpolation in command context
| 128 | async getAutofill(id: string) { return this.request(`/autofills/${id}`); } |
Template literal with variable interpolation in command context
| 144 | super(`Canva API ${status} on ${path}: ${body}`); |
Access to .env file
| 188 | clientId: process.env.CANVA_CLIENT_ID!, |
Access to .env file
| 189 | clientSecret: process.env.CANVA_CLIENT_SECRET!, |
External URL reference
| 55 | private static BASE = 'https://api.canva.com/rest/v1'; |
External URL reference
| 209 | BASE = "https://api.canva.com/rest/v1" |
External URL reference
| 285 | - [Authentication](https://www.canva.dev/docs/connect/authentication/) |
External URL reference
| 286 | - [OpenAPI Spec](https://www.canva.dev/sources/connect/api/latest/api.yml) |