skills/promovaweb/clickupfy/clickup-issue-implement/Socket

clickup-issue-implement

Warn

Audited by Socket on Aug 14, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The overall workflow matches a ClickUp execution skill, but the fallback reliance on an unverifiable `clickupfy` CLI and the combination of untrusted ClickUp content with file-editing/external-action authority make the skill higher risk than a normal project-management helper.

Confidence: 84%Severity: 78%

Audit Metadata

Analyzed At

Aug 14, 2026, 08:21 PM

Package URL

pkg:socket/skills-sh/promovaweb%2Fclickupfy%2Fclickup-issue-implement%2F@37597e6c2375f94dae090f3ab9c6b8de0cb61db1156da68b401e891840a9a8cf