Claw Canvas

A virtual canvas for OpenClaw to output content and visualize its thinking during development.

Security Scan

The skill is a small, coherent wrapper that sends content to OpenClaw's canvas API; it asks for no credentials or installs and contains only minor documentation/implementation mismatches.

Purpose & Capability

The name/description match the code: the CLI sends markdown to openclaw.default_api.canvas to present content. However SKILL.md advertises additional features (display_image, progress, snapshot, interactive thinking) that are not implemented in scripts/canvas_cli.py (only display_markdown exists). This is an inconsistency but not evidence of malicious behavior.

Instruction Scope

Runtime instructions are narrowly scoped to invoking the CLI to display content. The SKILL.md examples include an image-display command that the included CLI does not implement; otherwise the instructions do not request files, credentials, or unrelated system data. The CLI calls default_api.canvas — review what that API does in your runtime because the script delegates output handling to it.

Install Mechanism

No install spec and only a small Python script are included. Nothing is downloaded or written during install by this package itself.

Credentials

No environment variables, credentials, or config paths are required. The only dependency is the presence of an openclaw.default_api object at runtime (expected for an OpenClaw skill).

Persistence & Privilege

The skill does not request always:true, does not modify other skills or global configuration, and has no install-time persistence instructions.

Assessment

This appears to be a small, legitimate helper that forwards content to the agent's canvas API. Before installing: (1) verify what openclaw.default_api.canvas does in your runtime (does it store, forward, or expose canvas contents externally?), (2) note that the SKILL.md advertises image/progress features that the included script does not implement — if you need those, request or inspect an updated implementation, (3) test the CLI in a safe environment to confirm behavior and output destinations, and (4) if you are concerned about sensitive content being shown, avoid sending secrets to the canvas and confirm any viewers/servers that can access canvas contents.

Claw Canvas Skill

Description

This skill wraps OpenClaw's native canvas tool to provide a dedicated, interactive surface for the agent to visualize its internal processes, display intermediate results, and output rich content directly on a virtual canvas. It enables a more transparent and intuitive development workflow by making the agent's thinking and work-in-progress visible.

Core Functionalities

• Render Markdown/HTML: Display formatted text, code, tables, and images.
• Visualize Data: Present charts, graphs, or structured data.
• Show Progress: Update the canvas with real-time progress of tasks.
• Interactive Thinking: Optionally display thought processes or decision trees.
• Snapshot: Capture the current state of the canvas.

Usage

This is primarily an internal skill for the agent to use to illustrate its workflow. It will expose a CLI interface for displaying content.

# Example: Display markdown content
python3 scripts/canvas_cli.py display_markdown --content "# Agent Thinking\n\nHere's my current thought process..."

# Example: Display an image
python3 scripts/canvas_cli.py display_image --url "https://example.com/image.png"

Purpose

To enhance transparency, improve user understanding of complex agent processes, and provide a dynamic, real-time output area for development tasks. This will be invaluable for tasks like:

• Visualizing website structure during the Mac App conversion.
• Displaying drafted blog posts or tweets with formatting.
• Showing data analysis results.
• Illustrating program flow or architectural decisions.