Skip to main content

clickup-cost-tuning

Optimizes ClickUp API usage costs through effective plan selection and request reduction strategies.

Install this skill

or
60/100

Security score

The clickup-cost-tuning skill was audited on May 23, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 53

Template literal with variable interpolation in command context

SourceSKILL.md
53const key = `spaces:${teamId}`;
medium line 56

Template literal with variable interpolation in command context

SourceSKILL.md
56const data = await clickupRequest(`/team/${teamId}/space?archived=false`);
medium line 72

Template literal with variable interpolation in command context

SourceSKILL.md
72return clickupRequest(`/list/${listId}/task?${new URLSearchParams({
medium line 109

Template literal with variable interpolation in command context

SourceSKILL.md
109await clickupRequest(`/team/${teamId}/webhook`, {
medium line 102

Webhook reference - potential data exfiltration

SourceSKILL.md
102### 4. Use Webhooks Instead of Polling
low line 108

Webhook reference - potential data exfiltration

SourceSKILL.md
108// Good: register webhook, process events on-demand (0 polling requests)
low line 109

Webhook reference - potential data exfiltration

SourceSKILL.md
109await clickupRequest(`/team/${teamId}/webhook`, {
low line 112

Webhook reference - potential data exfiltration

SourceSKILL.md
112endpoint: 'https://myapp.com/webhooks/clickup',
medium line 167

Webhook reference - potential data exfiltration

SourceSKILL.md
167| Cache stale data | TTL too long | Invalidate via webhooks |
medium line 169

Webhook reference - potential data exfiltration

SourceSKILL.md
169| Polling overhead | No webhook setup | Switch to event-driven |
low line 112

External URL reference

SourceSKILL.md
112endpoint: 'https://myapp.com/webhooks/clickup',
low line 173

External URL reference

SourceSKILL.md
173- [ClickUp Pricing](https://clickup.com/pricing)
Scanned on May 23, 2026
View Security Dashboard
Installation guide →