← back to json-canvas

SkillMD Review · json-canvas

our safety review · skill by galyarderlabs

CAUTION

Reads and writes .canvas files; references external URLs and file paths within the system.

reviewed 2026-08-22

What the verdicts mean

PASS

No risky instructions — documentation or standard, read-only development-tool usage.

CAUTIONthis skill

Legitimate purpose with real capabilities (runs scripts, calls services, or handles credentials). Read the skill before installing.

WARNING

Risky patterns beyond the skill's job — elevated privileges, config changes, or bypassed confirmations. Review carefully.

FAIL

Instructions a safe skill should never contain — injection, exfiltration, or destructive commands. Don't install unless you've verified the source.

INCONCLUSIVE

Could not be confidently assessed — treat as unreviewed and inspect the SKILL.md yourself.