Scan Report
5 /100
trello
Manage Trello boards, lists, and cards via the Trello REST API
Documentation-only Trello skill with fully declared network access and shell usage. No malicious behavior detected.
Safe to install
Skill is safe to use. No action required.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | NONE | NONE | — | No filesystem access in skill |
| Network | READ | READ | ✓ Aligned | SKILL.md:22-23 - curl to api.trello.com |
| Shell | WRITE | WRITE | ✓ Aligned | SKILL.md:22 - curl commands documented |
| Environment | READ | READ | ✓ Aligned | SKILL.md:15-16 - TRELLO_API_KEY, TRELLO_TOKEN |
8 findings
Medium External URL 外部 URL
https://developer.atlassian.com/cloud/trello/rest/ SKILL.md:4 Medium External URL 外部 URL
https://trello.com/app-key SKILL.md:14 Medium External URL 外部 URL
https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN SKILL.md:28 Medium External URL 外部 URL
https://api.trello.com/1/boards/ SKILL.md:33 Medium External URL 外部 URL
https://api.trello.com/1/lists/ SKILL.md:38 Medium External URL 外部 URL
https://api.trello.com/1/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN SKILL.md:43 Medium External URL 外部 URL
https://api.trello.com/1/cards/ SKILL.md:51 Medium External URL 外部 URL
https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN&fields=name SKILL.md:77 File Tree
2 files · 2.7 KB · 89 lines Markdown 1f · 84L
JSON 1f · 5L
├─
_meta.json
JSON
└─
SKILL.md
Markdown
Security Positives
✓ Documentation-only skill with no executable code - purely instructive examples
✓ All network activity is to legitimate Trello API endpoints (api.trello.com)
✓ Credentials used locally for API authentication only, not exfiltrated
✓ No obfuscation, base64 encoding, or suspicious patterns
✓ Clear warning in SKILL.md about keeping API key and token secret
✓ Rate limits and security warnings properly documented
✓ No sensitive local file access (no ~/.ssh, ~/.aws, .env, etc.)
✓ No supply chain concerns - no dependencies