trello

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Employs standard shell utilities, specifically curl and jq, to facilitate Trello API interactions and process the resulting JSON data.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with Trello's official domain (api.trello.com), which is a well-known service for project management.
  • [CREDENTIALS_UNSAFE]: Authentication is managed via environment variables (TRELLO_API_KEY and TRELLO_TOKEN), adhering to best practices by avoiding hardcoded secrets.
  • [PROMPT_INJECTION]: The skill processes external data (card names, descriptions, and comments) from the Trello API, creating an ingestion surface for potential indirect instructions.
  • Ingestion points: Data retrieved from api.trello.com (SKILL.md).
  • Boundary markers: Absent.
  • Capability inventory: Shell command execution for API interaction.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 10:45 PM
Security Audit — agent-trust-hub — trello