Agent skill · software engineering · jeremylongshore
canva-debug-bundle
Assemble a minimal Canva Connect diagnostic bundle without credentials, customer content, raw payloads, or full headers. Use when preparing an incident handoff or provider escalation. Trigger with: "Canva debug bundle", "collect Canva evidence", "sanitize Canva diagnostics".
Why this skill is useful
Adds a comprehensive executable script for collecting diagnostic information from the Canva API, which the AI cannot generate on its own.
What it needs
Requires bash, curl, grep, tar installed locally. Requires canva account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Canva Redacted Debug Bundle Overview Prefer references and classifications over raw data. The bundle should prove configuration and failure state while remaining safe to share with authorized responders. Prerequisites Incident ID, UTC window, affected endpoint pattern, and deployment revision Approved evidence path, reviewer, retention, and deletion time Redaction denylist and current data-classification policy Instructions Step 1: Freeze a manifest List each proposed artifact, purpose, source, classification, redaction rule, owner, and retention before collecting it. Step 2: Collect local versions Use Read and Grep to capture application/runtime version, pinned OpenAPI checksum, deployment/config revision, and feature flags without environment values. Step 3: Collect failure envelopes Record aggregate status/provider-code counts, endpoint patterns, opaque request/job references, and sanitized timestamps. Do not collect bodies or user/resource IDs. Step 4: Add bounded connectivity evidence If authorized, record DNS/TLS outcome and one non-mutating test-user status check. Exclude Authorization and response headers beyond an explicit safe allowlist. Step 5: Review before packaging Use Write or Edit to build the manifest and summary, scan for credential formats, URLs, personal data, and design content, then require a second-person review. Step 6: Seal and expire Hash the reviewed files, record access controls and deletion time, transfer through the approved channel, and verify deletion after closure. Authentication Canva Connect calls use Bearer access tokens obtained by a backend through OAuth 2.0 Authorization Code with SHA-256 PKCE. Request explicit least-privilege scopes, keep client secrets and tokens out of browser-visible state, and serialize refresh so the replacement single-use refresh token is stored atomically. Tool Discipline Use Read and Grep for discovery and evidence. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/canva-debug-bundle