trello
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses official Trello API endpoints (api.trello.com) for its operations.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to use environment variables for sensitive API keys and tokens rather than hardcoding them.
- [PROMPT_INJECTION]: The skill ingests untrusted external data from Trello (card names, descriptions, board names) which could be used for indirect prompt injection. \n- Ingestion points: Trello API responses via
curlinSKILL.md. \n- Boundary markers: None identified. \n- Capability inventory: Usescurlfor network access andjqfor data processing. \n- Sanitization: No sanitization of ingested content is performed.
Audit Metadata