pp-clickup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow is to run clickup-pp-cli with --agent, which ingests ClickUp task/page/comment text returned by the API (outsider-authored content from other users in the workspace) into the agent’s LLM context via the command’s JSON stdout/provenance envelope.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill instructs the runtime to fetch and execute remote code to install the required CLI (e.g., "go install github.com/mvanhorn/printing-press-library/library/project-management/clickup/cmd/clickup-pp-cli@latest"), so the installation step is a runtime external dependency that executes remote code.