trello

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md explicitly instructs the agent to call Trello's public API (e.g., curl to https://api.trello.com/1/boards/{boardId}/cards?...) and to read user-generated fields like card "desc" and comments, so untrusted third-party content from Trello could contain instructions that influence the agent's subsequent actions.