trello
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Employs standard shell utilities, specifically
curlandjq, to facilitate Trello API interactions and process the resulting JSON data. - [EXTERNAL_DOWNLOADS]: The skill communicates with Trello's official domain (
api.trello.com), which is a well-known service for project management. - [CREDENTIALS_UNSAFE]: Authentication is managed via environment variables (
TRELLO_API_KEYandTRELLO_TOKEN), adhering to best practices by avoiding hardcoded secrets. - [PROMPT_INJECTION]: The skill processes external data (card names, descriptions, and comments) from the Trello API, creating an ingestion surface for potential indirect instructions.
- Ingestion points: Data retrieved from
api.trello.com(SKILL.md). - Boundary markers: Absent.
- Capability inventory: Shell command execution for API interaction.
- Sanitization: Absent.
Audit Metadata