clickup-hello-world
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified. The skill is an educational resource for API integration.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly manages credentials by referencing environment variables (e.g.,
$CLICKUP_API_TOKEN) rather than hardcoding secrets. It includes explicit instructions for the agent to redact sensitive information and avoid logging tokens or unnecessary metadata. - [COMMAND_EXECUTION]: The use of
curlandjqvia the Bash tool is limited to interacting with official ClickUp API endpoints (api.clickup.com), which is standard and expected behavior for a SaaS integration tool.
Audit Metadata