6 ms·
You’ve completely missed the point, it’s saying that the skill will need you to provide a Trello API key but he hasn’t declared that it will need that Subseque
by inlustra 7mo ago
You’ve completely missed the point, it’s saying that the skill will need you to provide a Trello API key but he hasn’t declared that it will need that
Subsequently they’ve included the use of curl but also haven’t declared that either which means that it _could_ leak your key if you provide it one. That’s why it’s suspicious - virus total has flagged that you should probably review the skill.md
- dpoloncsak 7mo agoOh, I see. Seems obvious you would need an API key in this context but I get the idea that it's an undeclared but required var, which could be shady