The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The skill implements secure credential storage. The API token is stored in ~/.config/clickup/token with restricted file permissions (0600), ensuring that only the current user can access the token. This follows security best practices for CLI-based tools.
[COMMAND_EXECUTION]: The skill uses local Ruby scripts for all operations. Analysis shows these scripts are scoped specifically to ClickUp API management and do not execute arbitrary shell commands or access unrelated system files.
[EXTERNAL_DOWNLOADS]: All network traffic is strictly directed to the official ClickUp API at https://api.clickup.com. No third-party dependencies are downloaded; the skill relies entirely on the Ruby standard library.
[DATA_EXFILTRATION]: No patterns of unauthorized data exfiltration were detected. The skill only transmits data required for ClickUp API operations (task details, comments, timers) to the official service provider.

clickup