The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides a detailed manual for the cup CLI tool. The agent uses this tool to perform operations such as task management, sprint tracking, and workspace configuration via shell commands.
[EXTERNAL_DOWNLOADS]: The instructions direct the user or agent to install the @krodak/clickup-cli package using npm or brew. These resources are hosted on official package registries and originate from the skill author's repository, which is consistent with the skill's primary purpose.
[INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from the ClickUp API which could contain untrusted instructions.
Ingestion points: cup tasks, cup search, cup comments, cup activity, and cup doc-pages (SKILL.md).
Boundary markers: The skill does not define prompt delimiters but recommends using --description-file and --message-file flags to handle multiline markdown safely and avoid shell injection.
Capability inventory: The skill includes high-privilege capabilities such as cup update, cup delete, cup attach (file upload), and cup export (writing data to the local file system).
Sanitization: No specific input sanitization for ClickUp content is mentioned in the CLI reference.

clickup