SEO to Kanban Workflow

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent and disclosed, but it depends on an external Kanban plugin/API key and sends workflow content to a cloud dashboard.

Before installing, verify the `claw-kanban` plugin and its source, understand how the dashboard API key is stored and used, and avoid sharing confidential SEO briefs or unpublished content unless you trust the cloud Kanban service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the companion plugin adds code outside this reviewed instruction-only skill.

Why it was flagged

The skill's core dashboard functionality depends on an external plugin that is not included in the supplied artifacts. This is disclosed and purpose-aligned, but users should verify the package before installing it.

Skill content
You MUST install the companion code plugin from NPM... openclaw plugins install claw-kanban
Recommendation

Verify the NPM/OpenClaw package identity, publisher, and linked source repository before installing; prefer pinned or trusted versions where possible.

What this means

The companion plugin may use the API key to create or update items in your cloud Kanban dashboard.

Why it was flagged

The workflow expects a dashboard API key even though the registry metadata declares no primary credential or environment variables. This appears purpose-aligned for Kanban sync, but it is still account authority.

Skill content
Get your free Dashboard API Key to see the visualization at: https://webkanbanforopenclaw.vercel.app
Recommendation

Use a dedicated dashboard key with the least privilege available, keep it private, and revoke it if you stop using the skill or plugin.

What this means

SEO briefs, research notes, drafts, and generated HTML may be uploaded to and retained by the cloud Kanban service.

Why it was flagged

The skill discloses a cloud data flow for progress logs and generated HTML artifacts. This matches the dashboard purpose, but it means task content can be stored outside the local agent environment.

Skill content
sync data to the cloud dashboard and send API requests... logs this research directly... attaches the generated HTML file directly to the Kanban card
Recommendation

Avoid using the workflow for confidential content unless you are comfortable with the dashboard service's access controls, retention, and sharing behavior.