clickup-migration-deep-dive
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (Jira, Asana, Trello) and ClickUp APIs, creating a potential surface for indirect prompt injection if source data contains malicious instructions.\n
- Ingestion points: External migration source data and ClickUp API responses (SKILL.md).\n
- Boundary markers: Lacks explicit data delimiters, but provides strict mapping and validation rules (SKILL.md).\n
- Capability inventory: Employs
WebFetchfor network access andWrite/Editfor file modifications (SKILL.md).\n - Sanitization: Recommends redacting sensitive content, including task text and attachments, from all reports and logs (references/official-docs.md).
Audit Metadata