clickup-data-handling
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted data from ClickUp API responses (task descriptions, comments), creating a surface for potential indirect prompt injection. Ingestion points: ClickUp API results in exportUserClickUpData and scanClickUpTaskForPii (SKILL.md). Boundary markers: No specific delimiters are used to wrap external content. Capability inventory: Access to Read, Write, and Edit tools. Sanitization: Includes a robust redaction utility for logging, though export data remains raw.
Audit Metadata