trello-api

Warn

Audited by Socket on Sep 4, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's Trello-management purpose is coherent, but its actual data flow routes all access and authentication through Maton intermediary endpoints instead of Trello's official API. That makes this a managed proxy pattern with meaningful credential and data exposure to a third party; not confirmed malware, but medium security risk.

Confidence: 89%Severity: 64%
Audit Metadata
Analyzed At
Sep 4, 2026, 01:53 PM
Package URL
pkg:socket/skills-sh/craftos-dev%2Fcraftbot%2Ftrello-api%2F@5e773dae7a993251e074674250fca221be4002c6d0b4078c1579fb1c3b516f30
Security Audit — socket — trello-api