trello
Warn
Audited by Snyk on Aug 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (low risk: 0.10). 该技能的运行路径主要通过 cyeam CLI 直接查询/操作 Trello 任务与附件（boards/lists/cards/status-changes/homework/card attachments），以及 webhook 管理；但工作流读取的是 Trello 上已存在的卡片/附件数据与其元信息，并未描述存在可由外部作者“投递到队列/订阅源”从而强制注入的在线监控文本入口。
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata