clickup-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local repository and fetches remote content from official ClickUp documentation. This creates a potential surface where malicious instructions embedded in those sources could attempt to influence the agent's behavior.
- Ingestion points: The skill uses
Read,Glob, andGrepto inspect repository files andWebFetchto retrieve content fromdeveloper.clickup.com. - Boundary markers: Instructions include explicit boundaries for environment isolation and a requirement to redact sensitive task text, member data, and tokens.
- Capability inventory: File read/write/edit access and network fetching capabilities are enabled.
- Sanitization: The skill mandates redacting sensitive identifiers and secrets in all output receipts and reports.
- [SAFE]: The skill explicitly instructs against the printing of sensitive credentials (tokens, OAuth secrets, webhook secrets) and includes fail-closed guards to prevent cross-environment data exposure. References to external documentation point to official and well-known service domains.
Audit Metadata