trello
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard
curlcommands to interact with the official Trello API (api.trello.com). These commands are triggered by natural language requests and are part of the skill's primary purpose. Evidence includes numerous examples inSKILL.mdand reference files for managing boards, lists, and cards. - [DATA_EXPOSURE]: The skill correctly instructs the user to store sensitive credentials (
TRELLO_API_KEY,TRELLO_TOKEN) in environment variables rather than hardcoding them. This follows security best practices for credential management in agent skills. - [REMOTE_CODE_EXECUTION]: The skill references an official Atlassian Swagger definition for the Trello API (
https://dac-static.atlassian.com/cloud/trello/swagger.v3.json). This is a trusted source used for API schema discovery and does not involve executing arbitrary code.
Audit Metadata