Skip to main content

clickup-rate-limits

Manages ClickUp API rate limits effectively with backoff and queuing strategies to optimize request throughput.

Install this skill

or
70/100

Security score

The clickup-rate-limits skill was audited on May 18, 2026 and we found 10 security issues across 4 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 59

Template literal with variable interpolation in command context

SourceSKILL.md
59const response = await fetch(`https://api.clickup.com/api/v2${path}`, {
medium line 84

Template literal with variable interpolation in command context

SourceSKILL.md
84console.warn(`Rate limited. Waiting ${(waitMs / 1000).toFixed(1)}s (attempt ${attempt + 1})`);
medium line 92

Template literal with variable interpolation in command context

SourceSKILL.md
92throw new Error(`ClickUp ${response.status}: ${error.err ?? 'Unknown error'}`);
medium line 102

Template literal with variable interpolation in command context

SourceSKILL.md
102throw new Error(`ClickUp API: max retries exceeded for ${path}`);
medium line 157

Template literal with variable interpolation in command context

SourceSKILL.md
157taskIds.map(id => queuedClickUpRequest(`/task/${id}`))
low line 166

Fetch to external URL

SourceSKILL.md
166const response = await fetch('https://api.clickup.com/api/v2/user', {
low line 62

Access to .env file

SourceSKILL.md
62'Authorization': process.env.CLICKUP_API_TOKEN!,
low line 167

Access to .env file

SourceSKILL.md
167headers: { 'Authorization': process.env.CLICKUP_API_TOKEN! },
low line 59

External URL reference

SourceSKILL.md
59const response = await fetch(`https://api.clickup.com/api/v2${path}`, {
low line 166

External URL reference

SourceSKILL.md
166const response = await fetch('https://api.clickup.com/api/v2/user', {
Scanned on May 18, 2026
View Security Dashboard
Installation guide →