trello
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Employs standard system utilities
curlandjqto execute API requests and parse JSON data from Trello. - [DATA_EXFILTRATION]: Facilitates data exchange with official Trello domains (
api.trello.com) as required for its primary function. - [PROMPT_INJECTION]: The skill ingests user-generated content from Trello cards (titles, descriptions, comments), representing an indirect prompt injection surface.
- Ingestion points: Card and board data retrieved via the Trello REST API.
- Boundary markers: No explicit delimiters are present in the command outputs.
- Capability inventory: Execution of
curlandjqfor data processing. - Sanitization: Input is processed as structured JSON via
jqbefore being presented to the agent.
Audit Metadata