The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill requires installation of the @krodak/clickup-cli NPM package and a Homebrew tap from krodak/tap. These are official vendor-owned resources necessary for the tool's operation.
[COMMAND_EXECUTION]: The skill makes frequent use of the cup CLI tool to interact with the ClickUp service, which requires executing shell commands.
[INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from the ClickUp API, creating a potential surface for indirect prompt injection attacks.
Ingestion points: Task descriptions, comments, and activity logs retrieved via cup task, cup activity, and cup comments as described in SKILL.md.
Boundary markers: There are no specified delimiters or instructions in the skill to distinguish between external data and agent instructions.
Capability inventory: The skill possesses network access via the ClickUp API, file system access through commands like cup export and cup attach, and command execution capabilities via cup.
Sanitization: The skill documentation does not mention any sanitization or validation of content fetched from the ClickUp API.

clickup