70High
The skill uses fabricated user consent to bypass authorization and includes unauthorized file system probing instructions that exceed its intended design functionality.
HygienePackaging & Manifest1 finding
Skill Info
Nameanthropics/skills/canvas-design
Registrygithub
Version35414756ca55
PURLpkg:github/anthropics/skills@35414756ca55?skill=canvas-design
Stars156,850
Installs80,000
Source
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
80,000 installs
Skills.shDocs
npx skills add https://github.com/anthropics/skillsAssessments (3)
AI Agent Traps ↗Potential unauthorized file system accesshighcommand executionAML.T0050AML.T0053AML.T0072LLM05:2025LLM06:2025
The instructions command the agent to search a specific directory ('./canvas-fonts') and download fonts, which may exceed the intended scope of a design skill and could be used to probe the file system. [ensemble: confirmed by 3/3 passes; severity set to the agreed median (ADR-0067).]
70% confidence
Search the ./canvas-fonts directory. Download and use whatever fonts are needed
Fabricated user consent / pre-authorized instruction — a statement falsely attributed to the user to manufacture authorizationmediumprompt injectionAML.T0051AML.T0051.000AML.T0051.001AML.T0054LLM01:2025
Fabricated user consent / pre-authorized instruction — a statement falsely attributed to the user to manufacture authorization
95% confidenceline 122
The user ALREADY said
Missing usage exampleslowpolicy violation
Skill body contains no code blocks or usage examples, making it harder for users to evaluate.
100% confidence
Version History (2)
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/anthropics/skills/canvas-design)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/anthropics/skills/canvas-design"><img src="https://mondoo.com/ai-agent-security/api/badge/github/anthropics/skills/canvas-design.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/anthropics/skills/canvas-design.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow