New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Canva CI Integration

by jeremylongshore in jeremylongshore/tons-of-skills-marketplace

Build credential-free Canva contract tests with a separately protected live read.

MITAuto-check passedBackend & APIs

Install Canva CI Integration

skills CLI
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill canva-ci-integration -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install jeremylongshore/tons-of-skills-marketplace canva-ci-integration --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/.curated/canva-ci-integration .claude/skills/canva-ci-integration && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
canva-ci-integration
GitHub stars
2.8k
Token cost
~956 tokens
SKILL.md length
395 words
Files
2 (incl. references)
Skills in repo
3,342
Repo updated
First seen
Licence
MIT

At a glance

Build credential-free Canva contract tests with a separately protected live read.

  • Works in 6 steps: Inventory workflow trust → Define offline contracts → Pin provider inputs → …
  • Testing adapters
  • SKILL.md covers Overview, Prerequisites, Instructions and Authentication, plus 5 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Canva CI Integration is an agent skill from jeremylongshore/tons-of-skills-marketplace. Build credential-free Canva contract tests with a separately protected live read. Use when testing adapters, OAuth boundaries, OpenAPI drift, fork behavior, or deployment readiness. Trigger with: "test Canva in CI", "add Canva contract tests", "secure Canva GitHub Actions".

Its SKILL.md is about 960 tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/official-docs.md`). Compatibility notes: The live lane requires a protected environment and dedicated low-privilege test user; forked code must never receive secrets.

It sits in Backend & APIs, covering Integration testing, OpenAPI specifications and OAuth and OpenID Connect. It works with Canva, OpenAPI and GitHub Actions. The repository describes itself as: Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com. The licence is MIT.

When your agent uses it

  • Testing adapters
  • OAuth boundaries
  • Deployment readiness
  • With: test Canva in CI

Example prompts

  • “test Canva in CI”
  • “add Canva contract tests”
  • “secure Canva GitHub Actions”
  • “/canva-ci-integration”

Requirements

  • Compatibility (from SKILL.md): The live lane requires a protected environment and dedicated low-privilege test user; forked code must never receive secrets.
  • Pre-approved tools (allowed-tools): Read, Grep, Write, Edit

Workflow steps

6 steps, taken from the step headings in SKILL.md.

  1. Inventory workflow trust
  2. Define offline contracts
  3. Pin provider inputs
  4. Add a protected live read
  5. Close secret boundaries
  6. Emit exact-head evidence

What it can do on your machine

Read from SKILL.md and the folder at commit cfae287. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Grep
    • Write
    • Edit

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • canva.dev

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    The live lane requires a protected environment and dedicated low-privilege test user; forked code must never receive secrets.

    From compatibility in the SKILL.md frontmatter.

Context cost

Canva CI Integration loads about 956 tokens when it runs, and up to ~1.1k if it reads all its reference files. Until then it costs about 74 tokens; SKILL.md has 395 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~74
When it runs · the whole SKILL.md, loaded when a task matches
~956
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1.1k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jeremylongshore/tons-of-skills-marketplace at commit cfae287, republished under its MIT licence (© jeremylongshore). 395 words, ~956 tokens.

Download SKILL.mdSave it as .claude/skills/canva-ci-integration/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
canva-ci-integration
description
Build credential-free Canva contract tests with a separately protected live read. Use when testing adapters, OAuth boundaries, OpenAPI drift, fork behavior, or deployment readiness. Trigger with: "test Canva in CI", "add Canva contract tests", "secure Canva GitHub Actions".
allowed-tools
Read, Grep, Write, Edit
compatibility
The live lane requires a protected environment and dedicated low-privilege test user; forked code must never receive secrets.
version
2.0.0
argument-hint
[test-command-and-protected-environment]
model
inherit
effort
high
license
MIT
author
Jeremy Longshore <jeremy@intentsolutions.io>
tags
saas, canva, ci, operations

Canva Fork-Safe CI Contract Lane

Overview

Keep pull-request validation offline and deterministic. Reserve one minimal live read for trusted commits after environment protection, without rotating production tokens inside CI.

Prerequisites

  • Existing test framework and repository-defined command
  • Pinned Canva OpenAPI snapshot or validated fixtures
  • Protected environment with dedicated test integration and cleanup owner

Instructions

Step 1: Inventory workflow trust

Use Read and Grep to map pull-request events, fork execution, secret references, generated clients, artifact uploads, and any code path that creates Canva resources.

Step 2: Define offline contracts

Use Write or Edit to test request construction, error parsing, explicit-scope checks, async job states, redaction, and unknown response fields against fixtures.

Step 3: Pin provider inputs

Version the OpenAPI snapshot or its checksum and make drift visible. Do not silently regenerate clients during an unrelated test run.

Step 4: Add a protected live read

Use an approved test user to call a non-mutating identity or metadata endpoint. Assert authorization and response shape, not volatile content.

Step 5: Close secret boundaries

Do not use privileged pull-request events to run untrusted code. Keep client secrets and refresh tokens outside job logs, artifacts, caches, and fork contexts.

Step 6: Emit exact-head evidence

Record commit, commands, fixture version, live endpoint pattern, protected environment, redaction result, and cleanup status.

Authentication

Canva Connect calls use Bearer access tokens obtained by a backend through OAuth 2.0 Authorization Code with SHA-256 PKCE. Request explicit least-privilege scopes, keep client secrets and tokens out of browser-visible state, and serialize refresh so the replacement single-use refresh token is stored atomically.

Show full SKILL.md (138 more words)Show less

Tool Discipline

Use Read and Grep for discovery and evidence. Use Write or Edit only for the approved artifact, code, configuration, test, or receipt described by this workflow; do not make an unapproved Canva-side change.

Output

  • Scoped decision or implementation artifact
  • Redacted operation and validation receipt
  • Failure, rollback, and follow-up ownership record

Examples

Every fork runs mocked OAuth and response fixtures. A protected main-branch job performs one user-identity read and fails closed when its expected credential is absent.

Error Handling

FailureResponse
Fork can reach secretsDisable the job and correct the event/environment boundary
CI rotates refresh tokensMove rotation to the application credential service
Fixture accepts unknown breakageUpdate the pinned contract and review the diff
Live test creates contentReplace it with a non-mutating identity or metadata read

Resources

© jeremylongshore, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (references) in skills/.curated/canva-ci-integration of jeremylongshore/tons-of-skills-marketplace.

  • SKILL.md
  • references/official-docs.md

Open the folder on GitHubat commit cfae287

Compare with similar skills

Canva CI Integration next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Canva CI Integration compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Canva CI Integration this skilljeremylongshore/tons-of-skills-marketplace2.8k—~956Automated safety check: PassMIT
Nuget Trusted Publishingrodri-oliveira-dev/Dapper-FluentMap454—~1.3kAutomated safety check: PassMIT
Nuget Trusted Publishingdotnet/skills5.6k2 repos~2.3kAutomated safety check: PassMIT
Soundcloud API Integrationsoundcloud/api259—~787Automated safety check: PassNone
Docs CIjh941213/my-cc-harness125—~989Automated safety check: NotesNone
Implementing API Security Testing With 42crunchmukul975/Anthropic-Cybersecurity-Skills34k—~2.8kAutomated safety check: PassApache-2.0

Similar skills

  • Nuget Trusted Publishing

    rodri-oliveira-dev/Dapper-FluentMap

    Review, maintain, or set up NuGet trusted publishing (OIDC) for GitHub Actions.

    454 GitHub stars~1.3k tokensUpdated today
    Backend & APIsAuto-check passed

  • Nuget Trusted Publishing

    dotnet/skills

    Official

    Set up NuGet trusted publishing (OIDC) on a GitHub Actions repo — replaces long-lived API keys with short-lived tokens.

    5.6k GitHub starsUsed in 2 repos~2.3k tokens
    DevOps & CloudAuto-check passed

  • Soundcloud API Integration

    soundcloud/api

    Integrates applications with the SoundCloud HTTP API using OAuth 2.1, OpenAPI, and developer docs.

    259 GitHub stars~787 tokensUpdated 10 days ago
    Backend & APIsAuto-check passed

  • Docs CI

    jh941213/my-cc-harness

    Scaffold a docs-as-code CI/CD pipeline + docs drift detection — link check, OpenAPI lint/breaking gate, mermaid validation, docs freshness check, CHANGELOG automation, docs.yaml manifest.

    125 GitHub stars~989 tokensUpdated 2 mo ago
    DevelopmentAuto-check: notes

  • Implementing API Security Testing With 42crunch

    mukul975/Anthropic-Cybersecurity-Skills

    Implements API security testing on the 42Crunch platform, combining API Audit for static analysis of OpenAPI definitions, API Conformance Scan for dynamic vulnerability testing, and API Protect for…

    34k GitHub stars~2.8k tokensUpdated 1 mo ago
    SecurityAuto-check passed

  • Discord Openapi Skill

    holon-run/uxc

    Operate Discord HTTP API through UXC with Discord OpenAPI schema.

    116 GitHub stars~2.2k tokensUpdated 26 days ago
    Backend & APIsAuto-check passed

More from jeremylongshore/tons-of-skills-marketplace

All 3,342 skills in this repo

  • Performing Security Code Review

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin.

    2.8k GitHub starsUsed in 2 repos~1.3k tokens
    Auto-check: notes

  • Adapting Transfer Learning Models

    jeremylongshore/tons-of-skills-marketplace

    Build this skill automates the adaptation of pre-trained machine learning models using transfer learning techniques.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed

  • Agent Context Loader

    jeremylongshore/tons-of-skills-marketplace

    Execute proactive auto-loading: automatically detects and loads agents.md files.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed

  • Aggregating Performance Metrics

    jeremylongshore/tons-of-skills-marketplace

    Aggregate and centralize performance metrics from applications, systems, databases, caches, and services.

    2.8k GitHub stars~1.2k tokensUpdated today
    Auto-check passed

  • Analyzing Capacity Planning

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to analyze capacity requirements and plan for future growth.

    2.8k GitHub stars~947 tokensUpdated today
    Auto-check passed

  • Analyzing Database Indexes

    jeremylongshore/tons-of-skills-marketplace

    Process use when you need to work with database indexing. An agent skill from jeremylongshore/tons-of-skills-marketplace.

    2.8k GitHub stars~2k tokensUpdated today
    Auto-check passed

Works with

Categories

Questions about Canva CI Integration

What does Canva CI Integration do?

Build credential-free Canva contract tests with a separately protected live read. Canva CI Integration is an agent skill from jeremylongshore/tons-of-skills-marketplace. Build credential-free Canva contract tests with a separately protected live read.

When should I use Canva CI Integration?

Canva CI Integration fits situations like: testing adapters; OAuth boundaries; deployment readiness; with: test Canva in CI.

How do I install Canva CI Integration in Claude Code?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill canva-ci-integration -a claude-code`. Or copy the skill folder (skills/.curated/canva-ci-integration in jeremylongshore/tons-of-skills-marketplace) into .claude/skills/canva-ci-integration in your project. Claude Code loads it when a task matches its description.

How do I install Canva CI Integration in Codex?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill canva-ci-integration -a codex`. Or copy the skill folder (skills/.curated/canva-ci-integration in jeremylongshore/tons-of-skills-marketplace) into .agents/skills/canva-ci-integration in your project. Codex loads it when a task matches its description.

Can I use Canva CI Integration in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill canva-ci-integration -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/canva-ci-integration, .gemini/skills/canva-ci-integration, .github/skills/canva-ci-integration and .opencode/skills/canva-ci-integration in your project.

What does Canva CI Integration need to run?

SKILL.md names no scripts, command-line tools or credentials: Canva CI Integration is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Grep, Write, Edit. Compatibility (from SKILL.md): The live lane requires a protected environment and dedicated low-privilege test user; forked code must never receive secrets..

Does Canva CI Integration access the network?

SKILL.md names 1 domain. As links in the text: canva.dev. This is read from the text; nothing was executed.

Is Canva CI Integration safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Canva CI Integration use?

Canva CI Integration is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Canva CI Integration use?

About 956 tokens (SKILL.md is roughly 3.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 130 tokens, read only when the agent opens those files.

What are the alternatives to Canva CI Integration?

Skills that share tags, products or a category with Canva CI Integration: Nuget Trusted Publishing (rodri-oliveira-dev/Dapper-FluentMap, 454 stars), Nuget Trusted Publishing (dotnet/skills, 5.6k stars), Soundcloud API Integration (soundcloud/api, 259 stars) and Docs CI (jh941213/my-cc-harness, 125 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Canva CI Integration?

jeremylongshore (a GitHub user) maintains it in jeremylongshore/tons-of-skills-marketplace, which has 2,827 GitHub stars. The repository holds 3,342 skills in this directory. The repository was last updated on October 10, 2026.

Source: jeremylongshore/tons-of-skills-marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.