trello

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl and jq to interact with the Trello REST API and process JSON responses. This is standard and expected behavior for a CLI-based tool.\n- [DATA_EXFILTRATION]: Network requests use the TRELLO_API_KEY and TRELLO_TOKEN environment variables for authentication. These credentials are transmitted exclusively to the official api.trello.com domain for communication with Trello's services.\n- [PROMPT_INJECTION]: The skill processes data from external sources, specifically Trello card titles, descriptions, and comments, which represents an indirect prompt injection surface.\n
  • Ingestion points: REST API responses from api.trello.com documented in SKILL.md.\n
  • Boundary markers: None provided in the command examples.\n
  • Capability inventory: curl for network communication and jq for parsing data.\n
  • Sanitization: Content retrieved from the API is used directly without additional validation or filtering.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 09:14 PM
Security Audit — agent-trust-hub — trello