Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward ClickUp API helper, with disclosed credential and network use that fits its stated purpose.
Install this only if you intend agents to access your ClickUp workspace. Use the least-privileged ClickUp token available, avoid placing tokens in shared files or transcripts, and require explicit approval before creating, updating, or deleting tasks.
The skill clearly instructs use of shell commands and a helper script that can perform authenticated API operations, but it declares no explicit tool scope or permissions boundary. That increases the chance the agent invokes shell unnecessarily or without clear user consent, especially because the shell can also access environment variables containing ClickUp credentials.
The description is broad enough that the skill may activate for generic project-management requests, not just explicit ClickUp tasks. That can lead to unintended access to workspace data or execution of networked shell commands when the user did not clearly ask to use ClickUp.
The skill includes concrete task creation and update examples against the live API without warning that these are write operations affecting production ClickUp data. In an agent setting, this raises the risk of accidental task creation, modification, or workflow disruption from ambiguous prompts or over-eager automation.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl "https://api.clickup.com/api/v2/list/{list_id}/task" \
-X POST \
-H "Authorization: {api_key}" \
-H "Content-Type: application/json" \
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
curl "https://api.clickup.com/api/v2/list/{list_id}/task" \
-X POST \
-H "Authorization: {api_key}" \
-H "Content-Type: application/json" \
The quick-reference table documents a DELETE endpoint without any warning that deletion may be irreversible or require confirmation. In an automation-oriented skill, surfacing destructive capability without guardrails can lead to accidental data loss when users or agents generalize from the reference and invoke deletion unsafely.
The guide documents handling of task objects that include personally identifiable information such as usernames, emails, descriptions, URLs, and due dates, but it does not warn users about minimizing collection, redacting output, or protecting tokens and exported data. In an agent skill context, examples are often copied directly into automations, so this omission increases the chance of unnecessary exposure of workplace data in logs, terminals, chat transcripts, or downstream tools.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
# API call helper
clickup_api() {
local endpoint="$1"
curl -s "https://api.clickup.com/api/v2${endpoint}" \
-H "Authorization: ${CLICKUP_API_KEY}"
}
No suspicious patterns detected.