clickup-install-auth
Facilitates ClickUp API v2 authentication setup using personal tokens or OAuth 2.0 for seamless integration.
Install this skill
Security score
The clickup-install-auth skill was audited on May 18, 2026 and we found 20 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 55 | const response = await fetch(`${CLICKUP_BASE}${path}`, { |
Template literal with variable interpolation in command context
| 83 | return `https://app.clickup.com/api?client_id=${CLIENT_ID}&redirect_uri=${encodeURIComponent(REDIRECT_URI)}`; |
Template literal with variable interpolation in command context
| 141 | super(`ClickUp API error ${status}: ${code}`); |
Curl to non-GitHub URL
| 108 | curl -s https://api.clickup.com/api/v2/user \ |
Curl to non-GitHub URL
| 112 | curl -s https://api.clickup.com/api/v2/team \ |
Fetch to external URL
| 88 | const response = await fetch('https://api.clickup.com/api/v2/oauth/token', { |
Access to .env file
| 46 | echo 'CLICKUP_API_TOKEN=pk_12345678_ABCDEFGHIJKLMNOPQRSTUVWXYZ' >> .env |
Access to .env file
| 47 | echo '.env' >> .gitignore |
Access to .env file
| 58 | 'Authorization': process.env.CLICKUP_API_TOKEN!, |
Access to .env file
| 79 | const CLIENT_ID = process.env.CLICKUP_CLIENT_ID!; |
Access to .env file
| 92 | client_id: process.env.CLICKUP_CLIENT_ID, |
Access to .env file
| 93 | client_secret: process.env.CLICKUP_CLIENT_SECRET, |
Access to .env file
| 149 | # .env (NEVER commit) |
External URL reference
| 28 | Configure ClickUp API v2 authentication. ClickUp supports two auth methods: **Personal API Tokens** (for personal/server-side use) and **OAuth 2.0** (for multi-user apps). There is no official SDK -- |
External URL reference
| 52 | const CLICKUP_BASE = 'https://api.clickup.com/api/v2'; |
External URL reference
| 80 | const REDIRECT_URI = 'https://yourapp.com/auth/clickup/callback'; |
External URL reference
| 83 | return `https://app.clickup.com/api?client_id=${CLIENT_ID}&redirect_uri=${encodeURIComponent(REDIRECT_URI)}`; |
External URL reference
| 88 | const response = await fetch('https://api.clickup.com/api/v2/oauth/token', { |
External URL reference
| 108 | curl -s https://api.clickup.com/api/v2/user \ |
External URL reference
| 112 | curl -s https://api.clickup.com/api/v2/team \ |