clickup-ci-integration
Automates CI/CD pipelines for ClickUp API integrations using GitHub Actions, enabling seamless task status synchronization.
Install this skill
Security score
The clickup-ci-integration skill was audited on May 18, 2026 and we found 15 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 30 | ```yaml |
Template literal with variable interpolation in command context
| 100 | const res = await fetch(`${BASE}${path}`, { |
Template literal with variable interpolation in command context
| 115 | const { status, data } = await api(`/list/${TEST_LIST}/task`, { |
Template literal with variable interpolation in command context
| 118 | name: `CI Test Task - ${new Date().toISOString()}`, |
Template literal with variable interpolation in command context
| 129 | const { status, data } = await api(`/task/${createdTaskIds[0]}`); |
Template literal with variable interpolation in command context
| 137 | await api(`/task/${id}`, { method: 'DELETE' }); |
Template literal with variable interpolation in command context
| 150 | `https://api.clickup.com/api/v2/task/${taskId}`, |
Template literal with variable interpolation in command context
| 162 | console.error(`Failed to update task ${taskId}:`, await response.text()); |
Template literal with variable interpolation in command context
| 165 | console.log(`Task ${taskId} status updated to "${newStatus}"`); |
Access to .env file
| 94 | const TOKEN = process.env.CLICKUP_API_TOKEN!; |
Access to .env file
| 95 | const TEST_LIST = process.env.CLICKUP_TEST_LIST_ID!; |
Access to .env file
| 154 | 'Authorization': process.env.CLICKUP_API_TOKEN!, |
External URL reference
| 68 | https://api.clickup.com/api/v2/user \ |
External URL reference
| 96 | const BASE = 'https://api.clickup.com/api/v2'; |
External URL reference
| 150 | `https://api.clickup.com/api/v2/task/${taskId}`, |