canvas — security grade SAFE, quality 64/100

Security audit verdict: SAFE · quality 64/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by steipete · AI Tool · ★ 50

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is canvas safe to install? View the security audit →

About canvas

canvas Note: I integrated this idea into https://github.com/steipete/clawdis - for now that's the main point where I'll iterate on this. Canvas still has a great use case for less integrated personal assistants, my use case for now is in Clawdis tho. is a small Go tool that gives an agent a “visual workspace”: Serves a directory over HTTP (defaults to a new temp dir). Launches a controlled Chromium tab (single-tab). Exposes simple CLI commands to navigate, run JavaScript, query/modify DOM, take screenshots, and reload. Auto-reloads the tab when files on disk change. When the served directory has no yet, Canvas shows a built-in welcome page. This is intentionally flexible: an agent can write HTML/CSS/JS to disk, view it in a real browser, validate it via DOM/JS queries, and capture screenshots. Install / Build Requires Go (this repo currently targets Go 1.25+). Build: Version stamping (optional): Quickstart Start a background session (headed by default): Restart the session (useful after updating Canvas, or to relaunch Chrome): If you prefer a short “build + start” shortcut (requires ): Show status (use for agent-friendly output): Get the DevT

Quick Facts

Stars50
Forks8
LanguageGo
CategoryAI Tool
LicenseMIT
Quality Score64.3675377132555/100
Last Updated2026-09-14
Created2025-12-12
Platformsbrowser, go
Est. Tokens~12k

canvas alternative? Top 2 similar tools

Looking for a canvas alternative? If you're comparing canvas with other ai tool tools, these 2 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • claude-code-voice-skill by abracadabra50 · ⭐ 169

    Skill to talk to Claude about your projects over the phone

  • maui-skills by davidortinau · ⭐ 163

    .NET MAUI skills for GitHub Copilot and Claude Code

More AI Tool Tools

Explore other popular ai tool tools:

View all AI Tool tools →

Popular Go Agent Tools

Frequently Asked Questions

What is canvas?

canvas is A browser canvas for your agents.. It is categorized as a AI Tool with 50 GitHub stars.

What programming language is canvas written in?

canvas is primarily written in Go.

How do I install or use canvas?

You can find installation instructions and usage details in the canvas GitHub repository at github.com/steipete/canvas. The project has 50 stars and 8 forks, indicating an active community.

What license does canvas use?

canvas is released under the MIT license, making it free to use and modify according to the license terms.

What are the best alternatives to canvas?

The top alternatives to canvas on Agent Skills Hub include claude-code-voice-skill, maui-skills. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse AI Tool tools