clickup-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
p-queuelibrary (via https://github.com/sindresorhus/p-queue) for managing request concurrency. This is a well-known, high-reputation utility in the Node.js ecosystem maintained by a recognized developer. - [DATA_EXFILTRATION]: Network operations are directed to
api.clickup.com, the official API endpoint for ClickUp, a well-known productivity service. No unauthorized or suspicious third-party domains were detected. - [CREDENTIALS_UNSAFE]: Authentication is handled via
process.env.CLICKUP_API_TOKEN. This adheres to security best practices by using environment variables rather than hardcoding secrets. - [DATA_EXPOSURE_AND_EXFILTRATION]: The instructions explicitly mandate that sensitive data, including tokens and task content, must be excluded from generated control records and logs, reducing the risk of accidental data leakage.
Audit Metadata