trello
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlandjqto interact with the Trello REST API and process JSON responses. This is standard and expected behavior for a CLI-based tool.\n- [DATA_EXFILTRATION]: Network requests use theTRELLO_API_KEYandTRELLO_TOKENenvironment variables for authentication. These credentials are transmitted exclusively to the officialapi.trello.comdomain for communication with Trello's services.\n- [PROMPT_INJECTION]: The skill processes data from external sources, specifically Trello card titles, descriptions, and comments, which represents an indirect prompt injection surface.\n - Ingestion points: REST API responses from
api.trello.comdocumented inSKILL.md.\n - Boundary markers: None provided in the command examples.\n
- Capability inventory:
curlfor network communication andjqfor parsing data.\n - Sanitization: Content retrieved from the API is used directly without additional validation or filtering.
Audit Metadata