skills/clawlink-hq/skills/productboard/Socket

productboard

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS. The skill is internally coherent for a Productboard integration, and the installer appears to be an official same-org npm CLI rather than an unverifiable binary. However, it routes access and data through ClawLink as a third-party intermediary and stores a local ClawLink credential, creating moderate trust and data-flow risk beyond a direct Productboard integration.

Confidence: 84%Severity: 56%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:45 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fproductboard%2F@029f5f687dba135f7a9b6d262ad3185c6fc523e90f572464b9aa84d9e1376648