clickup-webhooks-events
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements logic for the agent to ingest and act upon data from external ClickUp webhooks, which creates a surface for indirect prompt injection attacks.
- Ingestion points: Untrusted data enters the agent's context via the history_items and event payload fields as described in the Webhook Handler section of SKILL.md.
- Boundary markers: There are no boundary markers or explicit instructions provided to the agent to disregard any natural language instructions that might be contained within the webhook data.
- Capability inventory: The skill is configured with Write, Edit, and Bash capabilities, which could be exploited if the agent follows malicious instructions found in task payloads.
- Sanitization: The provided TypeScript example lacks sanitization or validation of the input data before it is processed by the processClickUpEvent function.
Audit Metadata