canvas-design
40Medium
The skill uses deceptive pre-authorized instructions to bypass user consent while lacking transparency through missing code documentation and licensing information.
HygienePackaging & Manifest2 findings
Skill Info
Namesickn33/antigravity-awesome-skills/canvas-design
Registrygithub
Versionbe20b372ace9
PURLpkg:github/sickn33/antigravity-awesome-skills@be20b372ace9?skill=canvas-design
Stars41,170
Installs650
Source
Install
Assessments (2)
AI Agent Traps ↗Fabricated user consent / pre-authorized instruction — a statement falsely attributed to the user to manufacture authorizationmediumprompt injectionAML.T0051AML.T0051.000AML.T0051.001AML.T0054LLM01:2025
Fabricated user consent / pre-authorized instruction — a statement falsely attributed to the user to manufacture authorization
100% confidenceline 124
The user ALREADY said
Missing usage exampleslowpolicy violation
Skill body contains no code blocks or usage examples, making it harder for users to evaluate.
100% confidence
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/sickn33/antigravity-awesome-skills/canvas-design)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/sickn33/antigravity-awesome-skills/canvas-design"><img src="https://mondoo.com/ai-agent-security/api/badge/github/sickn33/antigravity-awesome-skills/canvas-design.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/sickn33/antigravity-awesome-skills/canvas-design.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet, discover and control Shadow AI usage.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow