clickup-deploy-integration
Facilitates deployment of ClickUp API integrations to various cloud platforms with secure management and health checks.
Install this skill
Security score
The clickup-deploy-integration skill was audited on May 18, 2026 and we found 16 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 54 | `https://api.clickup.com/api/v2/list/${listId}/task?archived=false`, |
Template literal with variable interpolation in command context
| 164 | console.log(`ClickUp event: ${event} for task ${task_id}`); |
Fetch to external URL
| 123 | const response = await fetch('https://api.clickup.com/api/v2/user', { |
Webhook reference - potential data exfiltration
| 34 | | `CLICKUP_WEBHOOK_SECRET` | For webhook signature validation | If using webhooks | |
Webhook reference - potential data exfiltration
| 152 | ## Webhook Endpoint for Deployments |
Webhook reference - potential data exfiltration
| 155 | // api/webhooks/clickup.ts — receive ClickUp webhook events |
Webhook reference - potential data exfiltration
| 159 | // ClickUp webhook payloads include event type and history_items |
Webhook reference - potential data exfiltration
| 177 | | Webhook endpoint 5xx | Slow processing | Respond 200 immediately, process async | |
Webhook reference - potential data exfiltration
| 187 | For webhook event handling, see `clickup-webhooks-events`. |
Access to .env file
| 55 | { headers: { 'Authorization': process.env.CLICKUP_API_TOKEN! } } |
Access to .env file
| 124 | headers: { 'Authorization': process.env.CLICKUP_API_TOKEN! }, |
External URL reference
| 54 | `https://api.clickup.com/api/v2/list/${listId}/task?archived=false`, |
External URL reference
| 123 | const response = await fetch('https://api.clickup.com/api/v2/user', { |
External URL reference
| 181 | - [Vercel Environment Variables](https://vercel.com/docs/environment-variables) |
External URL reference
| 182 | - [Fly.io Secrets](https://fly.io/docs/reference/secrets/) |
External URL reference
| 183 | - [Cloud Run Secret Manager](https://cloud.google.com/run/docs/configuring/secrets) |