canvas

Enables display and control of HTML content on Bitterbot nodes for interactive demos, games, and visualizations.

Install this skill

67/100

Security score

The canvas skill was audited on May 21, 2026 and we found 11 security issues across 3 threat categories, including 1 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 167

Curl to non-GitHub URL

SourceSKILL.md

167	3. Test URL directly: `curl http://<hostname>:18793/__bitterbot__/canvas/<file>.html`

medium line 66

Access to hidden dotfiles in home directory

SourceSKILL.md

66	In `~/.bitterbot/bitterbot.json`:

low line 115

Access to hidden dotfiles in home directory

SourceSKILL.md

115	cat ~/.bitterbot/bitterbot.json \| jq '.gateway.bind'

medium line 165

Access to hidden dotfiles in home directory

SourceSKILL.md

165	1. Check server bind: `cat ~/.bitterbot/bitterbot.json \| jq '.gateway.bind'`

low line 49

External URL reference

SourceSKILL.md

49	http://<tailscale-hostname>:18793/__bitterbot__/canvas/<file>.html

low line 120

External URL reference

SourceSKILL.md

120	- loopback: `http://127.0.0.1:18793/__bitterbot__/canvas/<file>.html`

low line 121

External URL reference

SourceSKILL.md

121	- lan/tailnet/auto: `http://<hostname>:18793/__bitterbot__/canvas/<file>.html`

low line 146

External URL reference

SourceSKILL.md

146	canvas action:present node:mac-63599bc4-b54d-4392-9048-b97abd58343a target:http://peters-mac-studio-1.sheep-coho.ts.net:18793/__bitterbot__/canvas/snake.html

low line 167

External URL reference

SourceSKILL.md