[inlustra]

You’ve completely missed the point, it’s saying that the skill will need you to provide a Trello API key but he hasn’t declared that it will need that

Subsequently they’ve included the use of curl but also haven’t declared that either which means that it _could_ leak your key if you provide it one. That’s why it’s suspicious - virus total has flagged that you should probably review the skill.md

[dpoloncsak]

Oh, I see. Seems obvious you would need an API key in this context but I get the idea that it's an undeclared but required var, which could be shady