test1

Manage Trello boards, lists, and cards via the Trello REST API.

Security Scan

The skill is an instruction-only Trello integration that consistently requires only jq and your Trello API key/token and its instructions match the stated purpose.

Purpose & Capability

Name/description align with requirements: only jq and TRELLO_API_KEY/TRELLO_TOKEN are requested, which are appropriate for calling the Trello REST API.

Instruction Scope

SKILL.md contains explicit curl commands targeting api.trello.com and only references the declared env vars; it does not instruct reading unrelated files or environment variables.

Install Mechanism

No install spec or external downloads — instruction-only skill that relies on existing curl/jq on the host, which is the lowest-risk install approach.

Credentials

Requested env vars are exactly TRELLO_API_KEY and TRELLO_TOKEN; both are necessary and proportionate for the described Trello operations.

Persistence & Privilege

The skill does not set disable-model-invocation or always: true, so the model could autonomously invoke these instructions if allowed by the platform; since the tokens grant full Trello access, users should be aware of potential automated API calls.

Assessment

This skill is internally consistent and does what it says: it runs curl commands against Trello using TRELLO_API_KEY and TRELLO_TOKEN and formats responses with jq. Before installing, ensure you trust whoever manages the agent because the provided token/key grant full Trello access (read/write) and the model could call the API when invoked. Use least-privilege tokens if possible (short-lived or limited-scope), store credentials securely, and revoke the token if you stop using the skill. Also ensure jq and curl are available on the host.

Trello Skill

Manage Trello boards, lists, and cards directly from Clawdbot.

Setup

1. Get your API key: https://trello.com/app-key
2. Generate a token (click "Token" link on that page)
3. Set environment variables:

   export TRELLO_API_KEY="your-api-key"
   export TRELLO_TOKEN="your-token"
   

Usage

All commands use curl to hit the Trello REST API.

List boards

curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id}'

List lists in a board

curl -s "https://api.trello.com/1/boards/{boardId}/lists?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id}'

List cards in a list

curl -s "https://api.trello.com/1/lists/{listId}/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id, desc}'

Create a card

curl -s -X POST "https://api.trello.com/1/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \
  -d "idList={listId}" \
  -d "name=Card Title" \
  -d "desc=Card description"

Move a card to another list

curl -s -X PUT "https://api.trello.com/1/cards/{cardId}?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \
  -d "idList={newListId}"

Add a comment to a card

curl -s -X POST "https://api.trello.com/1/cards/{cardId}/actions/comments?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \
  -d "text=Your comment here"

Archive a card

curl -s -X PUT "https://api.trello.com/1/cards/{cardId}?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \
  -d "closed=true"

Notes

• Board/List/Card IDs can be found in the Trello URL or via the list commands
• The API key and token provide full access to your Trello account - keep them secret!
• Rate limits: 300 requests per 10 seconds per API key; 100 requests per 10 seconds per token; /1/members endpoints are limited to 100 requests per 900 seconds

Examples

# Get all boards
curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN&fields=name,id" | jq

# Find a specific board by name
curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | select(.name | contains("Work"))'

# Get all cards on a board
curl -s "https://api.trello.com/1/boards/{boardId}/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, list: .idList}'