trello-api
Warn
Audited by Socket on Sep 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's Trello-management purpose is coherent, but its actual data flow routes all access and authentication through Maton intermediary endpoints instead of Trello's official API. That makes this a managed proxy pattern with meaningful credential and data exposure to a third party; not confirmed malware, but medium security risk.
Confidence: 89%Severity: 64%
Audit Metadata