clickup
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from ClickUp (such as task descriptions, comments, and document pages) which is external untrusted data.
- Ingestion points:
clickup_search,clickup_get_task,clickup_get_task_comments, andclickup_get_document_pagesinapp.py. - Boundary markers: Not explicitly defined in the skill instructions.
- Capability inventory: The skill provides extensive capabilities to write to ClickUp (creating tasks, sending messages, attaching files) and interacts with the
mcp-skilllibrary. - Sanitization: No specific sanitization of the retrieved content is performed by the skill itself; it relies on the underlying agent's handling of tool outputs.
Audit Metadata