PikaBoard

Interact with PikaBoard task management API. Use when creating, updating, listing, or managing tasks. Agent-first kanban for AI teams. Triggers on: tasks, kanban, board, todo, backlog, sprint.

This skill appears to be what it says: a self-hosted PikaBoard integration. Before installing, verify you trust the GitHub repository since the install steps clone it and run npm install/build (npm scripts can run arbitrary code). Running the backend will open a local server (default port 3001) protected by PIKABOARD_TOKEN — treat that token as a secret. Consider running the service in an isolated environment/container, review the repo code if you need higher assurance, and avoid exposing the API to untrusted networks. If you do not trust the remote repo or want to avoid running build scripts, do not install. Otherwise the skill's behavior and requested inputs are proportionate to its purpose.

Type: OpenClaw Skill Name: pikaboard Version: 1.0.3 The skill bundle is benign. It sets up a local PikaBoard application, including cloning a GitHub repository, installing Node.js dependencies, and configuring environment variables and a local database. All network interactions are directed to `http://localhost:3001`. The `scripts/setup-agent-board.sh` script includes a robust defense against shell injection by validating `BOARD_ID` as numeric, preventing potential vulnerabilities. Instructions in `SKILL.md` and `README.md` are clear, task-oriented, and do not contain any prompt injection attempts or directives for malicious actions like data exfiltration, persistence, or unauthorized remote control.