Openclaw Trello

export TRELLO_API_KEY="your-api-key" export TRELLO_TOKEN="your-token"

curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id}'

curl -s "https://api.trello.com/1/boards/{boardId}/lists?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id}'

curl -s "https://api.trello.com/1/lists/{listId}/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id, desc}'

curl -s -X POST "https://api.trello.com/1/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN"
-d "idList={listId}"
-d "name=Card Title"
-d "desc=Card description"

curl -s -X PUT "https://api.trello.com/1/cards/{cardId}?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN"
-d "idList={newListId}"

curl -s -X POST "https://api.trello.com/1/cards/{cardId}/actions/comments?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN"
-d "text=Your comment here"

curl -s -X PUT "https://api.trello.com/1/cards/{cardId}?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN"
-d "closed=true"

Get all boards

curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN&fields=name,id" | jq

Find a specific board by name

curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | select(.name | contains("Work"))'

Get all cards on a board

curl -s "https://api.trello.com/1/boards/{boardId}/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, list: .idList}'

Trello Manage Trello boards, lists, and cards via the Trello REST API. MIT-0 · Free to use, modify, and redistribute. No attribution required. ⭐ 117 · 30k · 1.1k current installs · 1.2k all-time installs by Peter Steinberger · @steipete Highlighted MIT-0 Security Scan VirusTotal VirusTotal Benign View report → OpenClaw OpenClaw Suspicious high confidence The skill's instructions match its stated purpose (calling the Trello REST API), but registry metadata omits required credentials and a required binary (jq) found in SKILL.md — an incoherence that should be corrected before use. Details ▾ ℹ Purpose & Capability The SKILL.md describes standard Trello REST API operations (list boards/lists/cards, create/move/archive cards) and uses curl/jq. Those requirements are coherent with the skill name and description. However, the registry-level metadata included with the skill (requirements section) declares no required env vars or binaries while the SKILL.md explicitly needs TRELLO_API_KEY, TRELLO_TOKEN, and jq — a packaging/metadata mismatch. ✓ Instruction Scope Runtime instructions are narrow and prescriptive: they show curl calls to api.trello.com using the API key/token and jq to format output. The instructions do not ask to read unrelated files, system config, or send data to endpoints other than Trello. They do, however, instruct users to place sensitive credentials in environment variables (expected for API usage). ✓ Install Mechanism This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill itself. That minimizes install-risk. ! Credentials The secret-level credentials requested in SKILL.md (TRELLO_API_KEY and TRELLO_TOKEN) are appropriate and proportionate for a Trello integration. The concern is that the registry metadata does not declare these required env vars (and doesn't declare jq), meaning the platform may not surface or manage those secrets properly for users. This metadata omission creates a risk of misconfiguration or accidental credential exposure. ✓ Persistence & Privilege The skill does not request permanent presence (always: false) and does not modify other skills or agent-wide config. Autonomous invocation is enabled (default), which is normal and expected for skills, and does not by itself increase concern here. What to consider before installing This skill appears to be a straightforward Trello CLI how-to: it uses curl + jq and requires your Trello API key and token. Before installing or enabling it, consider the following: - Metadata mismatch: The SKILL.md requires TRELLO_API_KEY, TRELLO_TOKEN, and jq, but the registry entry lists none. Ask the publisher to fix the declared requirements so the platform can manage secrets/binaries correctly. - Only provide Trello API key/token if you trust the skill source. These tokens grant access to your Trello account — treat them as sensitive secrets and store them in the platform's secret store (not in shared shell startup files). - Avoid pasting tokens on the command line in shared shells or logs. Prefer using the platform's environment or secret-management features. - Because this is instruction-only, there's no downloaded code, which lowers install risk. Still verify the skill owner (kn70py...) and consider using a scoped/limited Trello token if possible. If you are unsure or cannot confirm the publisher, do not set your real Trello credentials until the metadata is corrected and you have validated the source. Like a lobster shell, security has layers — review code before you run it. Current version v 1.0.0 Download zip latest v k972ztzdw6e8fsz0f3vpj3dzhh7yj8kw License MIT-0 Free to use, modify, and redistribute. No attribution required. Terms https://spdx.org/licenses/MIT-0.html Runtime requirements 📋 Clawdis Bins jq Env TRELLO_API_KEY, TRELLO_TOKEN Files Compare Versions SKILL.md Trello Skill Manage Trello boards, lists, and cards directly from Clawdbot. Setup Get your API key: https://trello.com/app-key Generate a token (click "Token" link on that page) Set environment variables: export TRELLO_API_KEY="your-api-key" export TRELLO_TOKEN="your-token" Usage All commands use curl to hit the Trello REST API. List boards curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id}' List lists in a board curl -s "https://api.trello.com/1/boards/{boardId}/lists?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id}' List cards in a list curl -s "https://api.trello.com/1/lists/{listId}/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, id, desc}' Create a card curl -s -X POST "https://api.trello.com/1/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \ -d "idList={listId}" \ -d "name=Card Title" \ -d "desc=Card description" Move a card to another list curl -s -X PUT "https://api.trello.com/1/cards/{cardId}?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \ -d "idList={newListId}" Add a comment to a card curl -s -X POST "https://api.trello.com/1/cards/{cardId}/actions/comments?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \ -d "text=Your comment here" Archive a card curl -s -X PUT "https://api.trello.com/1/cards/{cardId}?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" \ -d "closed=true" Notes Board/List/Card IDs can be found in the Trello URL or via the list commands The API key and token provide full access to your Trello account - keep them secret! Rate limits: 300 requests per 10 seconds per API key; 100 requests per 10 seconds per token; /1/members endpoints are limited to 100 requests per 900 seconds Examples # Get all boards curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN&fields=name,id" | jq # Find a specific board by name curl -s "https://api.trello.com/1/members/me/boards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | select(.name | contains("Work"))' # Get all cards on a board curl -s "https://api.trello.com/1/boards/{boardId}/cards?key=$TRELLO_API_KEY&token=$TRELLO_TOKEN" | jq '.[] | {name, list: .idList}' Files 1 total SKILL.md 2.6 KB Select a file Select a file to preview. Comments Loading comments…