clickup-data-handling
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from ClickUp (tasks, comments, attachments), creating an attack surface for indirect prompt injection if that data contains malicious instructions.\n
- Ingestion points: ClickUp tasks, descriptions, comments, and attachments as referenced in SKILL.md and references/official-docs.md.\n
- Boundary markers: The skill provides instructions for classification and redaction but lacks specific instruction-data delimiters for segmenting untrusted data.\n
- Capability inventory: The skill utilizes tool capabilities including Read, Glob, Grep, WebFetch, Write, and Edit.\n
- Sanitization: The instructions mandate redaction of direct identifiers and telemetry, and encryption of approved storage.\n- [EXTERNAL_DOWNLOADS]: The skill references and fetches information from official ClickUp developer documentation and repositories.\n
- Evidence: Official developer resources at developer.clickup.com and status.clickup.com are referenced for API specifications and rate limits.\n
- Source: The skill references the official ClickUp API demo repository on GitHub for implementation guidance.
Audit Metadata