clickup-automation

SUSPICIOUS: The skill's capabilities are broadly aligned with ClickUp automation, but its data flows are mediated through Composio's hosted Rube MCP rather than directly to ClickUp. That third-party routing is disclosed and appears same-org/legitimate, so this is not confirmed malware; however it materially expands trust and gives an intermediary access to ClickUp data and action execution, making overall risk medium.