Canvas

Display and control HTML content on connected Mac, iOS, or Android nodes via a web-based canvas with live reload and remote actions.

Install/use this only if you intend to control canvases on connected OpenClaw nodes. Keep the canvas root limited to non-sensitive display files, prefer the narrowest bind mode that works, confirm the target node and URL before actions, run eval only with trusted JavaScript, and avoid snapshotting canvases that show secrets or private data.

Type: OpenClaw Skill Name: canvas Version: 1.0.0 The skill is classified as suspicious due to several high-risk capabilities that could be exploited as vulnerabilities. Primarily, the `eval` action allows arbitrary JavaScript execution within the WebView, posing a significant client-side vulnerability (e.g., XSS, potential data exfiltration if the WebView has access to local resources). Additionally, the skill serves local files from a configurable root directory (`canvasHost.root`), which could be misused to expose sensitive data if an attacker can control the directory or inject malicious files. The server's ability to bind to LAN or Tailscale further increases the attack surface for these potential exploits. While these capabilities are presented as features, they represent critical attack vectors if not properly secured at the agent or user input level.