← 返回 Skills 市场
5462
总下载
10
收藏
26
当前安装
1
版本数
在 OpenClaw 中安装
/install canva
功能描述
Create, export, and manage Canva designs via the Connect API. Generate social posts, carousels, and graphics programmatically.
安全使用建议
Install only if you are comfortable granting this skill read/write access to the connected Canva account. Use a Canva app/workspace with the minimum scopes you need, protect CANVA_CLIENT_SECRET and ~/.canva/tokens.json, and only approve uploads or exports when the exact file, design, and account context are clear.
功能分析
Type: OpenClaw Skill
Name: canva
Version: 1.0.0
The OpenClaw AgentSkills skill bundle for Canva appears benign. It provides a legitimate integration with the Canva API, handling OAuth authentication and API calls. Sensitive data like `CANVA_CLIENT_ID`, `CANVA_CLIENT_SECRET`, and access tokens are handled via environment variables and a local file (`~/.canva/tokens.json`) with secure permissions (`chmod 600`). All network requests are directed to the official Canva API endpoint (`https://api.canva.com/rest/v1`). There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` or `README.md` designed to subvert the agent's behavior beyond its stated purpose.
能力评估
Purpose & Capability
The stated purpose is to create, list, export, and manage Canva designs, and the artifacts implement those same Canva operations through official Canva API endpoints. These operations can read and modify Canva account content, so they are sensitive but purpose-aligned.
Instruction Scope
The README and SKILL.md describe user-directed commands and examples for listing designs, exporting, autofilling templates, and uploading assets. I found no hidden prompt override, automatic execution, unrelated data access, or deceptive instruction flow.
Install Mechanism
Installation is manual or through a normal ClawHub-style install command. The scripts depend on common local tools such as curl, jq, and openssl, but there is no install-time persistence, obfuscation, or privilege escalation.
Credentials
The skill requires CANVA_CLIENT_ID and CANVA_CLIENT_SECRET and requests Canva read/write design and asset scopes. That authority is broad but proportionate to the advertised Canva management, upload, and export features.
Persistence & Privilege
OAuth tokens are stored in ~/.canva/tokens.json for reuse and refresh, and the first authentication flow applies chmod 600. This is disclosed persistence of sensitive credentials, not hidden persistence.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install canva - 安装完成后，直接呼叫该 Skill 的名称或使用
/canva触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial public release of Canva Skill.
- Create, export, and manage Canva designs via the Connect API.
- Supports generating social media posts, carousels, and graphics programmatically.
- Includes operations for listing, creating, exporting designs, uploading assets, and managing templates.
- Detailed usage instructions, authentication steps, and error handling guidance provided.
- Requires Canva API credentials (Client ID and Secret) for setup.
元数据
常见问题
Canva 是什么？
Create, export, and manage Canva designs via the Connect API. Generate social posts, carousels, and graphics programmatically. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 5462 次。
如何安装 Canva？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install canva」即可一键安装，无需额外配置。
Canva 是免费的吗？
是的，Canva 完全免费（开源免费），可自由下载、安装和使用。
Canva 支持哪些平台？
Canva 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Canva？
由 abgohel（@abgohel）开发并维护，当前版本 v1.0.0。
推荐 Skills