clickup-automation

SUSPICIOUS. The skill's ClickUp automation scope is coherent, and it does not contain exploit code or direct credential theft patterns. However, it relies on a third-party hosted MCP intermediary (`rube.app`/Composio) for all schemas, data, and actions, and the referenced Rube service appears discontinued, creating medium supply-chain and data-routing risk that is inconsistent with a stable official integration.