canvas-os
Workflow Automation
C rating
License: MIT declared in package.json; full license not bundled
For local dashboards and small interactive interfaces in OpenClaw Canvas. It is not a generic web-design skill, and direct compatibility with Cursor or other hosts was not verified. Distribution v1.0.1 differs from package.json 1.0.0. Startup and shutdown scripts perform real process operations, not merely HTML rendering.
OpenClaw
Usage instructions
Reviewed: 2026-10-18. Method: static inspection of documentation, inventory and key code, without installation, network-function execution, authorization or sandbox tests. Package SHA-256: 86fce7f434e6d5b8cdafb65fddd44e00ff82df77737aa93e7f2e0d0b24af491a. It matches the previously served local package; a different future download needs a new review.
- Requires a Canvas-capable OpenClaw node and Python 3; scripts also use Unix utilities such as jq and lsof. Read open-app.sh, close-app.sh, canvas-inject.py and templates, checking commands against the installed host version.
- Use a separate test directory with no secrets and a dedicated port. Do not directly run the original helper that kills processes occupying the port.
- If a local HTTP server is needed, explicitly bind it to 127.0.0.1 and manage only the processes you start. Do not serve sensitive working directories or concatenate external content into executable JavaScript.
Safety review
Reference rating C is this site's editorial assessment of this package's permission risk, not a certification score: A indicates relatively low privilege, B requires review of networking or local writes, and C involves credentials, real business writes or elevated capabilities and should be evaluated in isolation. No grade guarantees freedom from vulnerabilities. Platforms identify documented targets, not completed host-by-host execution tests.
- open-app.sh uses lsof and kill -9 before checking the app directory. close-app.sh force-kills a PID read from /tmp. Either can stop an unintended service.
- The original python http.server command does not explicitly restrict its bind address. A localhost link does not prove other devices cannot reach the server.
- Canvas eval, HTML injection and OpenClaw deep links connect presentation to agent actions. Isolate untrusted content from executable instructions.
Copyright and takedown notice: AI Islands curates this page from public information. Skills, code, documents and packages remain the property of their original authors or rights holders. This listing is provided for indexing, research and installation convenience. If you believe any listing or download link infringes your rights, contact ai-islands@streamflowintel.com with proof of ownership, relevant URLs and your request. We will review and remove or adjust the content promptly. Review package permissions, dependencies and safety risks before installing.