clickup-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a security guide for ClickUp API management, providing best practices for token rotation and secret storage.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials were found; the skill uses non-functional placeholders (e.g.,
pk_12345678_...) and instructs users to use environment variables for actual secrets. - [DATA_EXFILTRATION]: Examples involving network requests target official ClickUp API endpoints (api.clickup.com) for legitimate purposes such as token verification and audit logging.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external package installations or remote code execution; it only provides code snippets for user reference.
Audit Metadata