clickup-observability
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly instructing the agent to redact sensitive fields, tokens, and authorization headers from telemetry and logs to prevent data exposure.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation from ClickUp's developer portal and an official API demo repository on GitHub for endpoint verification and configuration. These references target a well-known service and are documented for informational purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from ClickUp webhooks and APIs. It addresses potential injection risks by instructing the agent to separate measured evidence from proposed instrumentation and providing strict redaction rules for task content and identifiers.
- [SAFE]: No obfuscation, malicious persistence mechanisms, or unauthorized privilege escalation patterns were found in the skill instructions or metadata.
Audit Metadata