YBoard Operator

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherently focused on editing YBoard scenes, with no code or credential requests, but it can change content in the attached YBoard tab.

This appears safe to install based on the provided artifacts. Because it can edit YBoard content through the browser, use it only with the correct YBoard tab attached and verify the final scene edits and image before relying on the result.

Findings (1)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI02: Tool Misuse and Exploitation

What this means

If used on the wrong YBoard tab, project, or scene, the agent could change unintended presentation content.

Why it was flagged

This shows the skill uses browser automation to make live edits and apply images on yboard.online. That is purpose-aligned, but it is still mutable action against user content.

Skill content

Ensure Browser Relay is attached to the yboard tab. ... Edit text fields. ... Draw Custom Image → Apply.

Recommendation

Attach Browser Relay only to the intended YBoard tab and review the scene number, title, text fields, and applied image after use.