trello
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Uses
curlandjqto interact with the Trello REST API for managing boards, lists, and cards. - [PROMPT_INJECTION]: Indirect prompt injection surface identified through the retrieval of card and comment data from Trello.
- Ingestion points: Commands in
SKILL.mdthat list boards, lists, and card details. - Boundary markers: None provided to distinguish Trello data from instructions.
- Capability inventory: Includes the ability to create, update, and comment on cards via
curlPOST and PUT methods. - Sanitization: No sanitization or validation of the content retrieved from Trello is performed.
Audit Metadata