clickup-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for serverless functions and webhook handlers that ingest untrusted data from external sources.
- Ingestion points: The
api/clickup/tasks.tsfile accepts alist_idparameter from a URL search query, andapi/webhooks/clickup.tsparses arbitrary JSON payloads from ClickUp webhook events. - Boundary markers: The provided code snippets do not implement specific delimiters or instructions to the agent/runtime to ignore potentially malicious content embedded in these external inputs.
- Capability inventory: The skill is granted
Bashaccess for cloud deployment CLIs (vercel,fly,gcloud) and general file systemRead,Write, andEditpermissions. - Sanitization: The TypeScript templates demonstrate how to extract data but do not include validation or sanitization logic for the
list_idor webhookbodybefore they are used in logging or further API requests.
Audit Metadata