Productboard Search
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent may be able to retrieve product, feature, and feedback information from the connected Productboard workspace.
The skill is meant to use delegated access to a Productboard workspace. That is purpose-aligned, but users should notice that it may read broad account/workspace data.
Search and explore your ProductBoard workspace... `pb_search` - Global search across all ProductBoard entities
Use the skill only with a Productboard account or connector that is appropriate for the data you want the agent to see, preferably with least-privilege or read-only access.
Sensitive feedback details could be displayed in the agent session or copied into later user-visible outputs.
Customer feedback notes may contain sensitive customer or business information. The artifacts do not show storage or exfiltration, but the retrieved content can enter the chat context.
`pb_note_list` - List customer feedback notes ... Use `pb_search` with type `note` to find specific feedback
Avoid retrieving or sharing customer feedback that should not be exposed in the chat, and review outputs before forwarding them outside the intended audience.
The safety of actual Productboard access depends on the external pb_* tools available in the environment, not on code bundled with this skill.
The reviewed package contains only instructions, while the SKILL.md references pb_* tools. The skill itself adds no code, but users should verify the Productboard tool provider separately.
1 file(s): SKILL.md (2375 bytes); No install spec — this is an instruction-only skill.
Confirm that the Productboard connector or tools named by the skill come from a trusted source before granting access to workspace data.