Trello Projects

PassAudited by VirusTotal on May 13, 2026.

Overview

Type: OpenClaw Skill Name: trello-projects Version: 0.1.1 The skill bundle provides instructions for managing Trello boards and workflows via the ClawLink integration service. It utilizes a standard pairing flow and dynamic tool discovery through the 'clawlink-plugin'. The instructions in SKILL.md include security-conscious directives, such as requiring user confirmation for destructive actions and explicitly forbidding the agent from echoing or requesting raw credentials in chat.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may require adding an external plugin that provides the actual Trello tool access.

Why it was flagged

The skill is instruction-only but depends on installing a separate plugin. This is disclosed and purpose-aligned, but users should verify the plugin source before installing it.

Skill content
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Recommendation

Install the ClawLink plugin only from the expected ClawHub source and review the ClawLink verification/source links if you need additional assurance.

What this means

The agent may be able to access and modify Trello data permitted by the user's connected account.

Why it was flagged

The skill requires connecting a Trello account through OAuth. This is necessary for the stated purpose, but it gives ClawLink-mediated tools account-level access according to the granted Trello scopes.

Skill content
ClawLink's hosted page runs the Trello OAuth flow — the user clicks through the Trello login and authorization screen.
Recommendation

Review the Trello authorization screen, grant only acceptable permissions, and revoke the connection from Trello or ClawLink if no longer needed.

What this means

If used, the agent can make real changes to Trello boards, lists, cards, comments, and related workflow data.

Why it was flagged

The skill can perform write actions in Trello. These actions are consistent with the skill's purpose, and the instructions include preview and confirmation safeguards before writes or destructive/bulk changes.

Skill content
Create, move, archive, and update lists; Create and update cards; Add comments, attachments, labels, members, and votes to cards
Recommendation

Confirm previews carefully before allowing card, board, list, archive, attachment, member, or bulk changes.

What this means

Requests to manage Trello and related authentication flow information may pass through ClawLink infrastructure.

Why it was flagged

Trello access is mediated through the ClawLink service and plugin rather than being handled entirely locally. This external provider flow is disclosed and expected for the integration.

Skill content
Powered by ClawLink, an integration hub for OpenClaw that handles hosted connection flows and credentials
Recommendation

Use this skill only if you trust ClawLink to broker your Trello integration and review its documentation or verification page if needed.