clickup-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to official ClickUp API and status domains (api.clickup.com and status.clickup.com) to retrieve diagnostic data and platform status.
- [DATA_EXFILTRATION]: Authentication headers are constructed using the $CLICKUP_API_TOKEN environment variable, which follows industry best practices for secure credential handling.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from ClickUp API responses; the instructions provide explicit guidance on collecting only minimum metadata and redacting sensitive information to mitigate risks.
Audit Metadata