clickup-reference-architecture
Provides a production architecture for ClickUp API v2 integrations, enhancing project management with custom fields and time tracking.
Install this skill
Security score
The clickup-reference-architecture skill was audited on May 18, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 79 | const fields = await clickupRequest(`/list/${listId}/field`); |
Template literal with variable interpolation in command context
| 86 | await clickupRequest(`/task/${taskId}/field/${sprintField.id}`, { |
Template literal with variable interpolation in command context
| 92 | await clickupRequest(`/task/${taskId}/field/${dateFieldId}`, { |
Template literal with variable interpolation in command context
| 111 | await clickupRequest(`/team/${teamId}/time_entries`, { |
Template literal with variable interpolation in command context
| 125 | `/team/${teamId}/time_entries?start_date=${startMs}&end_date=${endMs}` |
Template literal with variable interpolation in command context
| 145 | const goal = await clickupRequest(`/team/${teamId}/goal`, { |
Template literal with variable interpolation in command context
| 158 | await clickupRequest(`/goal/${goal.goal.id}/key_result`, { |
Template literal with variable interpolation in command context
| 177 | const { tasks } = await clickupRequest(`/list/${listId}/task?archived=false`); |
Template literal with variable interpolation in command context
| 192 | await clickupRequest(`/task/${externalItem.clickupTaskId}`, { |
Webhook reference - potential data exfiltration
| 34 | │ (Routes, Controllers, Webhooks) │ |
External URL reference
| 73 | | `url` | string | `"https://example.com"` | |