clickup-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the instructions or provided scripts.
- [DATA_EXFILTRATION]: The skill interacts with ClickUp's official API domain (
api.clickup.com), which is a well-known and trusted service. It does not attempt to send sensitive data to unauthorized third-party locations. - [CREDENTIALS_UNSAFE]: The skill correctly recommends managing sensitive API tokens using environment variables (
process.env.CLICKUP_API_TOKEN) rather than hardcoding credentials in the source code. - [COMMAND_EXECUTION]: Bash scripts are used for legitimate development activities, such as searching for API usage patterns in local source files and verifying service connectivity.
Audit Metadata