trello-automation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides tools to read and process data from Trello, which constitutes a potential surface for indirect prompt injection.
- Ingestion points: Data retrieved from Trello card titles, descriptions, and comments through tools like
TRELLO_GET_SEARCHandTRELLO_GET_BOARDS_CARDS_BY_ID_BOARD. - Boundary markers: The instructions do not include specific delimiters or prompts to ignore instructions that might be embedded within the Trello content.
- Capability inventory: The skill includes tools for modifying Trello boards, such as
TRELLO_ADD_CARDSandTRELLO_UPDATE_CARDS_BY_ID_CARD. - Sanitization: There are no explicit requirements for sanitizing the input from Trello before the agent uses it to perform actions.
- [SAFE]: The skill configuration points to the Rube MCP server endpoint at
https://rube.app/mcpand official documentation atcomposio.dev, which are consistent with its stated functionality and author context.
Audit Metadata