clickup-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions utilize the GitHub CLI (
gh) to programmatically configure repository secrets for CI/CD workflows. - [INDIRECT_PROMPT_INJECTION]: The script
scripts/update-clickup-task.tsingests task identifiers and status updates from command-line arguments to perform API operations, which could be exploited if the source data is attacker-controlled. - Ingestion points: Command-line arguments (
process.argv) inscripts/update-clickup-task.ts. - Boundary markers: None; external inputs are not delimited or accompanied by safety instructions.
- Capability inventory: Network write capabilities (
fetchwith PUT method) to the ClickUp API. - Sanitization: The script lacks validation or sanitization of the arguments before their interpolation into the API URL and request body.
Audit Metadata