Kanban Workflow Export

• Analyzed: May 11, 2026, 4:51 AM
• Findings: 1
• Version: 0.1.4
• Hash: 1c5363c4d8ccc5d2fca42f9333ddecdd4d608a1fd95110d8558b69694d649edb
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill 'kanban-workflow' is classified as benign. It is designed for legitimate project management automation, integrating with external CLIs (GitHub, Linear, Plane, Planka) for its functionality. The skill's security model is transparently documented in `SECURITY.md` and `README.md`, explicitly stating that it operates with the same privileges as the underlying CLI sessions and does not handle API tokens directly. While it uses `execa` to run external commands and can install an OpenClaw cron job for its `autopilot-tick` feature (persistence), these actions are clearly stated, aligned with its purpose, and do not show signs of malicious intent like data exfiltration, unauthorized remote control, or stealthy backdoors. The code uses safe practices like passing arguments as arrays to `execa` to mitigate direct shell injection.