sociuu-task
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized operations were detected. The skill provides clear guidelines for administrative tasks and project tracking, emphasizing data security best practices.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from ClickUp tasks and repositories, creating a surface for potential indirect prompt injection. 1. Ingestion points: ClickUp task descriptions, attachments, and merge requests (SKILL.md). 2. Boundary markers: The skill does not define specific delimiters for separating external content. 3. Capability inventory: The agent has permissions to read and update ClickUp tasks and associated documents. 4. Sanitization: Instructions explicitly forbid pasting secrets, customer data, or raw tool logs into reports (references/task-documents.md).
Audit Metadata