clickup-hello-world
Facilitates initial ClickUp API calls to manage workspaces and tasks, ideal for integration and testing setups.
Install this skill
Security score
The clickup-hello-world skill was audited on May 24, 2026 and we found 17 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 70 | ```bash |
Template literal with variable interpolation in command context
| 78 | ```bash |
Template literal with variable interpolation in command context
| 91 | ```bash |
Template literal with variable interpolation in command context
| 107 | const task = await clickupRequest(`/list/${listId}/task`, { |
Template literal with variable interpolation in command context
| 120 | console.log(`Task created: ${task.name} (${task.id})`); |
Template literal with variable interpolation in command context
| 121 | console.log(`URL: ${task.url}`); |
Curl to non-GitHub URL
| 51 | curl -s https://api.clickup.com/api/v2/team \ |
Curl to non-GitHub URL
| 72 | curl -s "https://api.clickup.com/api/v2/team/${TEAM_ID}/space?archived=false" \ |
Curl to non-GitHub URL
| 81 | curl -s "https://api.clickup.com/api/v2/space/${SPACE_ID}/list" \ |
Curl to non-GitHub URL
| 85 | curl -s "https://api.clickup.com/api/v2/space/${SPACE_ID}/folder" \ |
Curl to non-GitHub URL
| 93 | curl -s -X POST "https://api.clickup.com/api/v2/list/${LIST_ID}/task" \ |
External URL reference
| 51 | curl -s https://api.clickup.com/api/v2/team \ |
External URL reference
| 72 | curl -s "https://api.clickup.com/api/v2/team/${TEAM_ID}/space?archived=false" \ |
External URL reference
| 81 | curl -s "https://api.clickup.com/api/v2/space/${SPACE_ID}/list" \ |
External URL reference
| 85 | curl -s "https://api.clickup.com/api/v2/space/${SPACE_ID}/folder" \ |
External URL reference
| 93 | curl -s -X POST "https://api.clickup.com/api/v2/list/${LIST_ID}/task" \ |
External URL reference
| 138 | "url": "https://app.clickup.com/t/abc123", |