trello
Manage Trello boards, lists, and cards. Trigger on phrases like "trello", "my boards", "shopping list", "create card", "move card", "sort cards".
Install this skill
or
90/100
Security score
The trello skill was audited on Aug 12, 2026 and we found 2 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 15
Access to home directory dotfiles
SourceSKILL.md
| 13 | |
| 14 | - Read the board's existing labels first (`GET /1/boards/{boardId}/labels`); reuse them, don't invent a parallel taxonomy. Typical set: Business, Feature, Pipeline, DevOps/Infra, Data, UI/UX, Bug/Fix. |
| 15 | - `trello-cards.sh` only **reads** labels. To **apply** one, call the API directly: `POST https://api.trello.com/1/cards/{cardId}/idLabels?value={labelId}&key=$KEY&token=$TOKEN` (creds in `~/.trello/config.json`). |
| 16 | - When you create a card, label it in the same pass. |
| 17 | - After any board-org task, verify zero unlabelled cards remain on the lists you touched. |
medium line 21
Access to home directory dotfiles
SourceSKILL.md
| 19 | ## Prerequisites |
| 20 | |
| 21 | - Credentials configured in `~/.trello/` (run setup if not done) |
| 22 | - jq, curl installed |
| 23 |
Scanned on Aug 12, 2026
View Security Dashboard