The Agent Skills Directory

[SAFE]: The skill provides documentation and workflow instructions for managing ClickUp tasks and workspaces. No malicious patterns, command injections, or exfiltration attempts were found.
[EXTERNAL_DOWNLOADS]: The skill references the Rube MCP endpoint (https://rube.app/mcp) and Composio documentation as prerequisites for configuration. These references are for legitimate tool setup and are documented neutrally.
[INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes data from external sources (ClickUp tasks and comments).
Ingestion points: External data is ingested via tools like CLICKUP_GET_TASK, CLICKUP_GET_TASKS, and CLICKUP_GET_TASK_COMMENTS described in SKILL.md.
Boundary markers: The skill does not explicitly instruct the agent to use delimiters or ignore instructions embedded in the retrieved ClickUp data.
Capability inventory: The agent can perform write operations including task creation, updates, and comment posting across the ClickUp hierarchy.
Sanitization: No specific content sanitization or validation logic is specified for the processed task descriptions or comments.

clickup-automation