Canvas Design Pro
v1.0.0Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art...
⭐ 0· 120·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (create visual art/posters) align with the provided assets and instructions. The repository contains many font license files which are appropriate for a design skill and explain how typography may be used. There are no unrelated credentials, binaries, or config paths requested.
Instruction Scope
SKILL.md is prescriptive about creating a 4–6 paragraph 'visual philosophy' and then producing .md, .pdf, and .png artifacts. It instructs the agent to repeatedly emphasize 'expert craftsmanship' (explicitly asking for repeated phrases such as 'meticulously crafted' and 'painstaking attention'), which is unusual stylistically but consistent with the design purpose. The instructions do not ask the agent to read unrelated files, access environment variables, call external endpoints, or exfiltrate data.
Install Mechanism
No install spec and no code files—this is instruction-only. Nothing will be downloaded or written to disk by the skill itself. This minimizes installation risk.
Credentials
The skill requests no environment variables, credentials, or config paths. The included font license texts are legitimate for font usage; there are no secret-like env vars or unrelated service keys.
Persistence & Privilege
always:false and user-invocable:true. The skill does not request permanent presence or elevated privileges. Autonomous invocation is allowed (platform default) but not combined with other red flags here.
Assessment
This skill appears internally consistent and low-risk: it contains only instructions and font license text files (no code, no installers, no secrets). A few things to consider before installing: 1) Source and homepage are unknown and registry owner IDs in metadata differ from the header — that is a minor provenance inconsistency you may want to verify if provenance matters to you. 2) The SKILL.md strongly enforces stylistic demands (repeating phrases about 'meticulously crafted' and similar wording); that is a creative constraint rather than a security issue but may affect output tone. 3) The included font files are covered by open font licenses (OFL), but if you plan to redistribute generated assets commercially, double-check the specific font licensing requirements in the included LICENSE/OFL texts. 4) Because the skill is instruction-only, it cannot itself execute network calls or write code — however the agent that invokes the skill may still use its own rendering tools to create PDFs/PNGs; make sure those rendering tools run in a secure environment. Overall the package is coherent with its claimed purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk979zwa71zqcy1bs5hg9tt27q5834705
License
MIT-0
Free to use, modify, and redistribute. No attribution required.