trello
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands involving
curlandjqto interact with the Trello REST API. The commands facilitate listing boards, lists, and cards, as well as creating or modifying Trello resources. Thejqutility is used for JSON processing of API responses. - [EXTERNAL_DOWNLOADS]: Includes a metadata configuration to install the
jqutility via the Homebrew package manager during the setup phase. - [DATA_EXFILTRATION]: Uses
TRELLO_API_KEYandTRELLO_TOKENenvironment variables for authentication. These credentials are transmitted toapi.trello.com, which is the official endpoint for the Trello service. - [PROMPT_INJECTION]: Potential surface for indirect prompt injection from data retrieved from external sources.
- Ingestion points: Reads card names, descriptions, and comments from Trello boards as documented in the command examples.
- Boundary markers: No delimiters or specific instructions are provided to the agent to distinguish Trello content from system instructions.
- Capability inventory: The skill provides capabilities to both read from and write to Trello via its REST API.
- Sanitization: Retrieved content is filtered through
jqbut not specifically sanitized or escaped to prevent embedded instructions from potentially influencing agent behavior.
Audit Metadata