Skip to main content

clickup-performance-tuning

Enhances ClickUp API v2 performance through caching, pagination, and connection pooling for optimized throughput and latency.

Install this skill

or
43/100

Security score

The clickup-performance-tuning skill was audited on May 18, 2026 and we found 13 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 62

Template literal with variable interpolation in command context

SourceSKILL.md
62const spaces = await cachedRequest(`/team/${teamId}/space?archived=false`);
medium line 65

Template literal with variable interpolation in command context

SourceSKILL.md
65const task = await cachedRequest(`/task/${taskId}`, 30_000);
medium line 85

Template literal with variable interpolation in command context

SourceSKILL.md
85const data = await clickupRequest(`/list/${listId}/task?${params}`);
medium line 104

Template literal with variable interpolation in command context

SourceSKILL.md
104console.log(`Processed ${count} tasks`);
medium line 139

Template literal with variable interpolation in command context

SourceSKILL.md
139clickupQueue.add(() => clickupRequest(`/task/${id}`))
medium line 158

Template literal with variable interpolation in command context

SourceSKILL.md
158clickupCache.delete(`/task/${task_id}`);
medium line 184

Template literal with variable interpolation in command context

SourceSKILL.md
184const { tasks } = await clickupRequest(`/list/${listId}/task?${params}`);
medium line 198

Template literal with variable interpolation in command context

SourceSKILL.md
198console.log(`[clickup] ${name}: ${ms}ms`);
medium line 202

Template literal with variable interpolation in command context

SourceSKILL.md
202console.error(`[clickup] ${name}: FAILED after ${ms}ms`);
medium line 146

Webhook reference - potential data exfiltration

SourceSKILL.md
146## 5. Webhook-Based Cache Invalidation
low line 149

Webhook reference - potential data exfiltration

SourceSKILL.md
149// Instead of polling or short TTLs, invalidate cache on webhook events
low line 150

Webhook reference - potential data exfiltration

SourceSKILL.md
150app.post('/webhooks/clickup', (req, res) => {
medium line 212

Webhook reference - potential data exfiltration

SourceSKILL.md
212| Stale cache | No invalidation | Use webhooks for invalidation |
Scanned on May 18, 2026
View Security Dashboard
Installation guide →