Productboard Release
v0.1.0Manage ProductBoard releases and roadmap planning
⭐ 1· 1.7k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill claims to manage ProductBoard (create/update/list features, products, users) but does not declare any ProductBoard API credentials, client library, or install steps. The instructions rely entirely on pb_feature_*/pb_product_*/pb_user_list tools that are not provided or explained in the package. Either those tools are provided by the platform (possible) or the SKILL.md is incomplete — the lack of declared credentials or dependency is disproportionate to the claimed capability.
Instruction Scope
The SKILL.md itself stays within ProductBoard-related operations and does not instruct the agent to read unrelated files, system paths, or external endpoints. It references other 'feedback skill tools' and assumes pb_* commands exist. The instructions are operational and scoped to product planning, but they grant broad action (create/update/archive features) which will require proper authentication and permissions not discussed here.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — low surface area for direct installation risk. However, that increases reliance on external pb_* tool availability (platform-provided or from other skills).
Credentials
No environment variables, secrets, or primary credential are declared even though ProductBoard API access normally requires an API token. The skill's omission of any credential requirement is unexpected and unexplained; it may rely on platform-managed credentials or other skills, which should be confirmed before use.
Persistence & Privilege
always is false (good). disable-model-invocation is false (normal). user-invocable is false, meaning the skill is not directly user-invokable and would be called autonomously by the agent when eligible — this is acceptable but worth noting because the skill can perform create/update/delete style actions if invoked.
What to consider before installing
Before installing or enabling this skill, verify where the pb_* tools come from and how ProductBoard authentication will be provided. Specifically:
- Check the skill's source (repository or author) to confirm whether pb_feature_* and related commands are platform-provided helpers or missing dependencies.
- Ensure ProductBoard API credentials (API token) are available to the agent and scoped with the minimum necessary permissions; the SKILL.md does not mention or request them.
- Because the skill performs create/update/archive operations, test it in a non-production workspace or with a least-privilege account first.
- If you cannot find a secure explanation for how auth is handled (platform secret store, another skill, or documented setup), treat the skill as incomplete and avoid granting it access to production ProductBoard data.Like a lobster shell, security has layers — review code before you run it.
latestvk977bzzrq5kkr28yt637jnx4ks80956h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🚀 Clawdis