The Agent Skills Directory

[PROMPT_INJECTION]: No malicious instructions, role-play attempts, or system prompt extraction patterns were detected.
[DATA_EXFILTRATION]: The skill uses placeholders like $CLICKUP_API_TOKEN for authentication, following best practices for secret management. Network operations are directed to the official ClickUp API domain (api.clickup.com), which is a well-known and legitimate service.
[COMMAND_EXECUTION]: Bash commands using curl are provided as examples for workspace management, which is consistent with the skill's stated purpose of managing webhooks.
[EXTERNAL_DOWNLOADS]: No remote scripts or unverified package installations were found. The code examples use standard libraries like express for legitimate server-side implementation logic.

clickup-webhooks-events