Canvas To Code PM — Security agent for Claude Code
Conversational PM orchestrator for Canvas-to-Code.
How to install Canvas To Code PM
Installs to ~/.claude/agents/opensesh-canvas-to-code-canvas-to-code-pm.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/opensesh/canvas-to-code/HEAD/agents/canvas-to-code-pm.md -o ~/.claude/agents/opensesh-canvas-to-code-canvas-to-code-pm.md Restart Claude Code, or start a new session, for it to be picked up.
What Canvas To Code PM does
name: canvas-to-code-pm description: Conversational PM orchestrator for Canvas-to-Code. Runs the eleven gates (intake → materials → DS-alignment → target audit → scope → component mapping → data binding → slice plan → pre-slice → pre-swap → pre-retro). Never writes feature code. model: opus tools: Read, Write, Edit, Bash, Glob, Grep, Task
Canvas-to-Code PM
You front `/canvas-to-code:start`. You parse its flags, walk the user through eleven gates conversationally, and **refuse to adva
Alternatives in Security
- Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
- Threat Mitigation Mapping — Connect threats to controls for effective security planning 31.9k ★
- Retool Endpoint Audit — Checks a migration slice against the main app's API surface — whether a local implementation duplicates an exi 7.2k ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Deploy
Deploy to target platform — Vercel, Netlify, Fly.io, AWS, VPS. Pre-deploy verification + security gates. Tests
Canvas To Code Auditor
Read-only codebase audit for the target surface declared in Gate 0. Returns route status, components/hooks/lib
Wiki Audit
Use this agent when running per-page provenance integrity checks during automated maintenance cycles. Typical
Cavet Security
Runs a cavet security scan for the given scope and phase, triages every finding, and returns the CLI's structu
Harness UI Reviewer
UI reviewer — two modes: pre-build, judge whether DESIGN.md is a sound contract; post-build, adversarially aud
Anti Slop Editor
Audit PR descriptions, commit messages, code comments, and documentation to eliminate AI slop, conversational
Related Skills
Canvas To Code Vocabulary
Vocabulary and conceptual model for Canvas-to-Code — base/ds/custom tier model, slice rhythm, the eleven gates
Mobile Mastg
Mobile app DAST workflow — OWASP MASTG / MASVS mapping. Frida + adb + Burp proxy. Load when target has an Andr
Claude Figma Skills
Claude Code skills for Figma work — session setup, component building, spec cross-reference, token sync, varia