$ ~/registry/skill/anthropics-small-business-skills-canva-creator

SKILL

canva-creator

Name: canva-creator
Author: anthropics

Turn an approved brief into social assets, copy, and a staged campaign.

Stars

★ 22,528

Source

GitHub

Updated

2026-07-11

// securityCaution

Prompt only, no code
Open source

Summary

The material indicates a prompt-only skill with no keys and no declared remote endpoints, so overall risk is low based on the provided checks. Caution is still warranted because the description references Canva/HubSpot and local brand asset paths, but the supplied material does not show executable integration details or configured data egress.

CredentialsLow risk

The material and system checks indicate no required keys or environment variables. There is no request for API tokens, OAuth credentials, or other sensitive authentication data, so credential exposure risk is low.

Network egressCaution

Although it is marked as having no remote endpoints and being prompt-only, the description explicitly references generating designs in Canva and staging social sends in HubSpot, implying reliance on third-party SaaS in business terms. The material does not provide actual endpoints, transfer scope, or integration details, so potential data egress warrants caution, but there is no clear red flag of unknown or unrelated exfiltration.

Code executionLow risk

The system flags it as prompt-only, and there are no installation commands, local process spawning, script execution, shell/system calls, or other executable capabilities described. The material does not support the presence of code-execution privileges.

Data accessCaution

The README mentions confirming the path to product photos on disk and handling approved briefs, copy, and social scheduling data, indicating possible access to local asset paths and marketing content. Based on the material, there is no sign of broad filesystem read/write, privilege escalation, or excessive authorization, but it does involve business data and should be used with minimal necessary access.

Supply chainCaution

The source is an open-source GitHub repository, which is a meaningful risk-reducing factor because the code can in principle be audited. However, the repo has 0 stars, no declared license, and unknown maintenance status, so community validation and governance signals are weak, leading to a moderate but cautious supply-chain posture.

Recommendations

Verify whether this skill is only a prompt template or an actual automation component connected to Canva/HubSpot.
If used with real marketing platforms, provide only the minimum campaign text and assets needed and avoid exposing unrelated customer data.
Review the repository source, commit history, and dependency list to confirm there is no hidden exfiltration or execution logic.
If local asset paths are involved, use copies in an isolated working directory rather than exposing broad disk locations.

Audited by: gpt-5.4 · 2026-06-17

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "canva-creator" skill from askskill:
1. Download https://raw.githubusercontent.com/anthropics/knowledge-work-plugins/main/small-business/skills/canva-creator/SKILL.md
2. Save it as ~/.claude/skills/canva-creator/SKILL.md
3. Reload skills and tell me it's ready

// download

Download SKILL.mdInstall manifest ↗

// examples

Turn a brief into a full social campaign

Prompt

Here is an approved campaign brief. Execute it into a full campaign: first create a posting calendar for Instagram, Facebook, X, and LinkedIn; then generate Canva design concepts for each social post; also draft captions for every post and one supporting marketing email. Submit each step for my approval before moving to the next one.

Expected

A step-by-step campaign package with a posting calendar, Canva social designs, captions, and an email draft, pausing for approval at each stage.

Generate social assets for a product launch

Prompt

Using this approved product launch brief, create 6 social media post assets for Instagram and LinkedIn only. Each post should include a Canva visual direction, layout suggestion, primary caption, CTA, and recommended publish time. Show me the first 2 for approval before completing the rest.

Expected

A platform-specific social content set delivered in batches, including design direction, copy, and timing recommendations with approval checkpoints.

Execute a brief into ready-to-send content

Prompt

I’ve already approved the content direction, so start creating the content. Turn this brief into a one-week social posting plan, generate the corresponding Canva post designs, and write each caption. Also add a plain-text email draft that I can later send from my own email tool. Route all pre-send steps to me for approval first.

Expected

An executable one-week campaign package with schedule, social designs, captions, and a plain-text email draft, all awaiting approval before sending.

// docs

Canva Creator

Scope

This skill handles a campaign in five sequential stages, each gated by owner approval:

brief → calendar → asset inventory → Canva designs → copy → HubSpot staging

Path	Channels	What this skill produces
Canva (social)	Instagram, Facebook, X/Twitter, LinkedIn	Canva design + caption + scheduled HubSpot post
Text-only	Email (newsletter, marketing, drip)	Subject + preheader + body, surfaced inline for the owner to send

Canva is not used for email rows under any circumstance — no templates, no autofill, no design copies, no asset uploads, no exports. The owner explicitly descoped Canva from the email path because email-template autofill produces placeholder graphics when image slots exceed available photos, and variation thumbnails fail to render in chat previews. If the owner asks for a Canva email design, see reference/gotchas.md for the redirect language.

Pre-flight

Before Stage 1, confirm:

Brief. The user has referenced or pasted an approved brief. If not: "I'll need the content brief before I can build the campaign. Do you have one from the content-strategy skill, or would you like to write one now?"
Canva tier. Pro/Teams require manual template selection from the user's library (no autofill API). Enterprise can autofill from brand templates.
HubSpot tier. Social staging requires Marketing Hub Professional. Starter or Free → skip Stage 5 and export a CSV instead (see reference/hubspot-staging.md).
Brand assets. Confirm the path to product photos on disk or that the brand kit is live in Canva.
Generation budget. Estimate the campaign's Canva volume and surface it before Stage 1 begins. Default is 3 candidates per Canva-bound row; each design costs ~5 API calls (autofill + export + polling).
```
Generation budget for this campaign:
  Canva (social) rows: 8
  Candidates per row:  3   (default — say "single candidate" to use 1)
  Total designs:       24
  API calls (approx):  ~120  (autofill + export + polling)

Canva limit: 100 requests/minute. This will take ~2-3 minutes of
generation, well within your tier limits. Proceed?
```
If the projected total designs exceeds 30, recommend single-candidate mode upfront — large campaigns run out of headroom fast. The owner can override the default to 1, 2, or 3 candidates per row before Stage 1 starts. Lock the chosen value for the entire session.

Workflow

Stage 1 — Posting calendar

Pull from the brief: content themes, channels, cadence, hard dates (launches, sales, holidays).

Build a calendar table with a Path column that routes every row to either Canva or text-only drafting:

Date	Channel	Path	Theme	Asset type	Caption/Subject angle
Jun 2	Instagram feed	Canva (social)	Linen launch	Square post	"finally, a dress…"
Jun 5	Email	Text-only	Linen launch	Email body	"Linen that actually breathes"

Tag every email-channel row as Text-only before presenting. Cap at 30 days unless the brief specifies otherwise. Flag scheduling conflicts (two posts same day for the same product) up front.

Checkpoint 1. Present the calendar. Ask: "Does this match the plan? Any dates to shift, channels to add, or themes to swap?" Iterate until approved, then restate the split out loud — "N rows go through Canva, M rows go through text-only drafting" — before moving on. Catching a miscategorization here is free; catching it after generating designs isn't.