Canva
AdvisoryAudited by Static analysis on May 13, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill requires trusting the ClawLink plugin as the integration layer for Canva actions.
The skill is instruction-only but depends on installing an external plugin to provide the actual Canva tooling.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the stated ClawHub source and review ClawLink before pairing it with your account.
Approving the connection may allow ClawLink/OpenClaw tools to read or modify Canva content according to the granted scopes.
The skill requires delegated Canva account access through OAuth, which is expected for the stated integration but is still sensitive authority.
ClawLink's hosted page runs the Canva OAuth flow — the user clicks through the Canva login and authorization screen.
Review the Canva authorization screen, connect only the intended account, and revoke access later if you no longer need the integration.
If approved, the agent may upload assets, import files, resize designs, or otherwise change Canva resources.
The skill can perform write actions in Canva, but it explicitly requires preview and confirmation for writes or confirmation-marked actions.
For writes or anything marked as requiring confirmation, call `clawlink_preview_tool` first, then confirm with the user.
Check previews and confirmations carefully, especially for bulk, external-facing, or destructive Canva changes.
Canva connection metadata and tool interactions may be mediated by ClawLink rather than happening directly inside the skill.
The skill routes integration setup and dynamic Canva tool access through an external gateway, which is disclosed and central to the design.
Powered by ClawLink, an integration hub for OpenClaw that handles hosted connection flows and credentials
Review ClawLink's documentation and privacy/security posture before using it with sensitive Canva assets.