Skills/npm/clickup-mcp-server

clickup-mcp-server@0.14.6

CAUTION

Publisher claims: "ClickUp MCP Server - Powering AI Agents with full ClickUp task, document, and chat management capabilities." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher taazkareem · joined 0 days agoInstalls 28,543Last detonated 52 min ago
Dispute verdict

Behavior trace

Honeypot run · 1 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.8sprocessdependency install exit 1
1.0sprocessexec /usr/bin/timeout
1.0sprocessexited 1: Node.js v22.23.4
1.0sclaimedno tools/list reply (exit 1)
1.0sprocessscript backend runs setup only

Static findings

MEDIUM
MCP server using network transport (SSE/HTTP)README.md:9 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
MCP server using network transport (SSE/HTTP)smithery.yaml:8 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Authorization escalation languageREADME.md:599 · Authorization escalation language
AST01
CRITICAL
Context shift attemptREADME.md:591 · Context shift attempt — trying to change operational mode
AST01
MEDIUM
MCP server using network transport (SSE/HTTP)build/index.js:2 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Authorization escalation languageREADME.md:589 · Authorization escalation language
AST01
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:4 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Prompt injectionREADME.md:587 · Prompt injection — known jailbreak technique reference
AST01
CRITICAL
Prompt injectionREADME.md:599 · Prompt injection — known jailbreak technique reference
AST01
CRITICAL
Credential pass-through configurationbuild/config.js:1 · Credential pass-through configuration — agent relays sensitive credentials
AST02
MEDIUM
Remote installer piped to shellREADME.md:193 · Remote installer piped to shell
AST07
HIGH
Authorization escalation languageREADME.md:591 · Authorization escalation language
AST01
CRITICAL
Prompt injectionREADME.md:592 · Prompt injection — known jailbreak technique reference
AST01
HIGH
Authorization escalation languageREADME.md:587 · Authorization escalation language
AST01
MEDIUM
MCP server using network transport (SSE/HTTP)build/transport/mcp-handler.js:1 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
HIGH
Authorization escalation languageREADME.md:592 · Authorization escalation language
AST01
MEDIUM
MCP server using network transport (SSE/HTTP)build/sse_server.js:1 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Prompt injectionREADME.md:591 · Prompt injection — known jailbreak technique reference
AST01
HIGH
Access to sensitive file pathsREADME.md:276 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:8 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Pipe-to-shell patternREADME.md:193 · Pipe-to-shell pattern — downloads and immediately executes remote code
AST06
HIGH
npx invocation of non-well-known packageREADME.md:253 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:13 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
CRITICAL
Prompt injectionREADME.md:589 · Prompt injection — known jailbreak technique reference
AST01