clickup-sdk-patterns

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's runtime code explicitly fetches and parses user-generated content from the third-party ClickUp API (see request() calling https://api.clickup.com/api/v2 and high-level methods like getTask/getUser in SKILL.md), so the agent will read and act on potentially untrusted task descriptions and other user-provided fields.