Skip to main content

clickup-data-handling

Facilitates ClickUp data handling, ensuring PII redaction and GDPR compliance for secure API integrations.

Install this skill

or
72/100

Security score

The clickup-data-handling skill was audited on May 30, 2026 and we found 8 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 69

Template literal with variable interpolation in command context

SourceSKILL.md
69findings.push({ field: `custom_field:${cf.name}`, type: 'email', value: cf.value });
medium line 72

Template literal with variable interpolation in command context

SourceSKILL.md
72findings.push({ field: `custom_field:${cf.name}`, type: 'phone', value: cf.value });
medium line 135

Template literal with variable interpolation in command context

SourceSKILL.md
135`/team/${teamId}/task?assignees[]=${userId}&include_closed=true`
medium line 140

Template literal with variable interpolation in command context

SourceSKILL.md
140`/team/${teamId}/time_entries?assignee=${userId}`
medium line 38

Webhook reference - potential data exfiltration

SourceSKILL.md
38| Webhook payloads | Medium (user objects in history) | Redact before queuing |
low line 103

Webhook reference - potential data exfiltration

SourceSKILL.md
103// Webhook payload redaction
low line 179

Webhook reference - potential data exfiltration

SourceSKILL.md
179{ dataType: 'webhook_events', retentionDays: 90, reason: 'Audit trail' },
low line 207

External URL reference

SourceSKILL.md
207- [ClickUp Privacy Policy](https://clickup.com/privacy)
Scanned on May 30, 2026
View Security Dashboard
Installation guide →