trello-api
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and processes user-generated Trello data from the public Trello API (e.g., numerous curl calls to https://api.trello.com/1/... and the webhook handler in SKILL.md) and uses that content in automation workflows (migration, analytics, webhook-triggered handlers), so untrusted third-party content could influence actions.
Audit Metadata