Security audit
Trello
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward Trello API helper that discloses its credentials and commands, though users should treat the token as powerful account access.
Install only if you are comfortable letting the agent use your Trello API key and token. Review board, list, and card IDs before running POST or PUT commands, keep the token secret, and revoke it when you no longer need the skill.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.