Agent skill · design visual · jeremylongshore
canva-core-workflow-b
Operate Canva assets, brand-template autofill, and folders with explicit rights and asynchronous reconciliation. Use when performing uploads, dataset validation, autofill jobs, or folder changes. Trigger with: "upload Canva asset", "autofill brand template", "manage Canva folder".
Why this skill is useful
Adds executable scripts for managing Canva assets and templates via the Connect API that aren't available in public documentation.
What it needs
Requires npm installed locally. Requires canva account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Canva Asset, Autofill, and Folder Workflow Overview Treat asset upload, dataset discovery, autofill, and folder mutation as separate authorization domains. Re-read schemas and reconcile asynchronous jobs rather than assuming old fields or completion. Prerequisites Authorized owner, tenant, operation, and destination Explicit asset, design, brand-template, or folder scopes Approved file rights, data classification, and cleanup policy Instructions Step 1: Choose one operation Identify upload, asset metadata change, template dataset read, autofill, or folder mutation. Do not bundle unrelated writes into one approval. Step 2: Validate rights and input Confirm resource ownership, file type/size against the current endpoint, malware policy, template availability, and every requested explicit scope. Step 3: Submit upload safely For binary or URL upload, record the operation and job ID, avoid logging source URLs or content, and poll the corresponding existing job. Step 4: Refresh the dataset Read the current template or design dataset immediately before autofill. Reject unknown required fields and disclose that nonexistent field names may be skipped. Step 5: Run autofill deliberately Confirm current entitlement and preview status, validate each data value, submit once, and reconcile the job before exposing the resulting design. Step 6: Apply folder mutation Validate source/destination authorization and expected current state, make one bounded change, then read back metadata and record rollback. Authentication Canva Connect calls use Bearer access tokens obtained by a backend through OAuth 2.0 Authorization Code with SHA-256 PKCE. Request explicit least-privilege scopes, keep client secrets and tokens out of browser-visible state, and serialize refresh so the replacement single-use refresh token is stored atomically. Tool Discipline Use Read and Grep for discovery and evidence. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/canva-core-workflow-b