← Back to Skills Marketplace
5462
Downloads
10
Stars
26
Active Installs
1
Versions
Install in OpenClaw
/install canva
Description
Create, export, and manage Canva designs via the Connect API. Generate social posts, carousels, and graphics programmatically.
Usage Guidance
Install only if you are comfortable granting this skill read/write access to the connected Canva account. Use a Canva app/workspace with the minimum scopes you need, protect CANVA_CLIENT_SECRET and ~/.canva/tokens.json, and only approve uploads or exports when the exact file, design, and account context are clear.
Capability Analysis
Type: OpenClaw Skill
Name: canva
Version: 1.0.0
The OpenClaw AgentSkills skill bundle for Canva appears benign. It provides a legitimate integration with the Canva API, handling OAuth authentication and API calls. Sensitive data like `CANVA_CLIENT_ID`, `CANVA_CLIENT_SECRET`, and access tokens are handled via environment variables and a local file (`~/.canva/tokens.json`) with secure permissions (`chmod 600`). All network requests are directed to the official Canva API endpoint (`https://api.canva.com/rest/v1`). There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` or `README.md` designed to subvert the agent's behavior beyond its stated purpose.
Capability Assessment
Purpose & Capability
The stated purpose is to create, list, export, and manage Canva designs, and the artifacts implement those same Canva operations through official Canva API endpoints. These operations can read and modify Canva account content, so they are sensitive but purpose-aligned.
Instruction Scope
The README and SKILL.md describe user-directed commands and examples for listing designs, exporting, autofilling templates, and uploading assets. I found no hidden prompt override, automatic execution, unrelated data access, or deceptive instruction flow.
Install Mechanism
Installation is manual or through a normal ClawHub-style install command. The scripts depend on common local tools such as curl, jq, and openssl, but there is no install-time persistence, obfuscation, or privilege escalation.
Credentials
The skill requires CANVA_CLIENT_ID and CANVA_CLIENT_SECRET and requests Canva read/write design and asset scopes. That authority is broad but proportionate to the advertised Canva management, upload, and export features.
Persistence & Privilege
OAuth tokens are stored in ~/.canva/tokens.json for reuse and refresh, and the first authentication flow applies chmod 600. This is disclosed persistence of sensitive credentials, not hidden persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install canva - After installation, invoke the skill by name or use
/canva - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial public release of Canva Skill.
- Create, export, and manage Canva designs via the Connect API.
- Supports generating social media posts, carousels, and graphics programmatically.
- Includes operations for listing, creating, exporting designs, uploading assets, and managing templates.
- Detailed usage instructions, authentication steps, and error handling guidance provided.
- Requires Canva API credentials (Client ID and Secret) for setup.
Metadata
Frequently Asked Questions
What is Canva?
Create, export, and manage Canva designs via the Connect API. Generate social posts, carousels, and graphics programmatically. It is an AI Agent Skill for Claude Code / OpenClaw, with 5462 downloads so far.
How do I install Canva?
Run "/install canva" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Canva free?
Yes, Canva is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Canva support?
Canva is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Canva?
It is built and maintained by abgohel (@abgohel); the current version is v1.0.0.
More Skills