Trello Automation

SUSPICIOUS: The stated purpose is coherent with the documented Trello capabilities, and there is no direct evidence of malware or exfiltration. The main concern is trust and data-flow opacity around the non-official `project-mcp` dependency, which may handle Trello credentials and API traffic without clear provenance or endpoint disclosure.