clickup-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes JSON data from external API endpoints which could potentially contain adversarial content designed to influence agent behavior.
- Ingestion points: Fetches data from ClickUp API v2 endpoints (
https://api.clickup.com/api/v2/userandhttps://api.clickup.com/api/v2/team) as documented inSKILL.md. - Boundary markers: None implemented for the API responses.
- Capability inventory: The skill utilizes
curl,tar, andsedfor file and network operations, and usespython3for data processing inSKILL.md. - Sanitization: Includes regex-based redaction for email addresses within JSON files and explicitly deletes local files containing raw HTTP authorization headers.
- [DYNAMIC_EXECUTION]: The skill uses inline Python snippets via
python3 -cto parse and format JSON output from the ClickUp API within the diagnostic scripts. - [DATA_EXFILTRATION]: The generated diagnostic bundle records the system
hostnameand the character count of theCLICKUP_API_TOKENenvironment variable. While the token value itself is not logged, these system details are included in thesummary.txtfile within the archive.
Audit Metadata