The Agent Skills Directory

[SAFE]: The skill performs expected project initialization tasks including directory scaffolding, configuration file generation, and integration with GitHub and Trello backends. All activities are consistent with its stated purpose of project management onboarding.
[COMMAND_EXECUTION]: The skill executes git commands for environment detection and uses the gh CLI for GitHub label and project management. These are standard operations for a development-focused tool and are documented within the allowed-tools configuration.
[UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill uses curl to interact with the Trello API at api.trello.com. This communication is required for board and webhook management and targets a well-known, established service domain.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill handles Trello authentication tokens provided by the user. It follows secure practices by advising the user to manage these secrets via environment variables in their shell profile rather than hardcoding them. The tokens are transmitted only to the official Trello API domain.
[INDIRECT_PROMPT_INJECTION]: The skill ingests project configuration data and research reports, creating an attack surface for indirect instructions. However, this is a standard functional requirement for project management systems and the associated risk is consistent with its intended use case.

setup