← 返回 Skills 市场
Pipeworx clickup
作者
Bruce Gutman
· GitHub ↗
· v1.0.0
· MIT-0
69
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pipeworx-clickup
功能描述
Access and manage ClickUp tasks, spaces, folders, and create new tasks using the ClickUp REST API v2 with your API key.
安全使用建议
Don't install this until the vendor explains how the ClickUp API key is provided and stored, and who operates gateway.pipeworx.io. Ask whether the skill calls api.clickup.com directly or proxies requests through the Pipeworx gateway, whether task content or credentials are logged or stored by that gateway, and request a declared primary credential/env var in the manifest. Prefer a skill that documents its auth flow (OAuth or a named env var) and has a public homepage or repo and privacy/security documentation. If you must test, avoid using a high‑privilege ClickUp key and monitor network traffic to see where data is sent.
能力标签
能力评估
Purpose & Capability
The name/description say this integrates with ClickUp using an API key, but the skill declares no required credentials or primaryEnv. A ClickUp integration normally requires an API key (or OAuth); the absence of declared credentials is inconsistent. The manifest also points to an external gateway (gateway.pipeworx.io) rather than calling api.clickup.com directly, which is not explained.
Instruction Scope
SKILL.md is very short and partly truncated; it lists operations but does not describe how or where the ClickUp API key is supplied or stored. The provided JSON points the agent to a third‑party MCP server; instructions do not state what data will be forwarded to that server, creating potential for unintended exfiltration of task content or credentials.
Install Mechanism
There is no install spec and no code files (instruction-only), so nothing will be written to disk during install. This lowers the technical install risk, but does not mitigate the concerns about external network calls described in the instructions.
Credentials
The skill declares no required environment variables yet its description explicitly says 'BYO API key.' The lack of a declared primary credential or env var for ClickUp API key is disproportionate and leaves unclear how credentials are handled (prompted interactively, sent to gateway, or stored).
Persistence & Privilege
Skill is not marked always:true and uses default autonomous invocation. It does not request persistent system-level privileges or config paths. However, autonomous invocation combined with the external gateway increases blast radius if the gateway or data handling is untrusted.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install pipeworx-clickup - 安装完成后,直接呼叫该 Skill 的名称或使用
/pipeworx-clickup触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Pipeworx clickup 是什么?
Access and manage ClickUp tasks, spaces, folders, and create new tasks using the ClickUp REST API v2 with your API key. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 69 次。
如何安装 Pipeworx clickup?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pipeworx-clickup」即可一键安装,无需额外配置。
Pipeworx clickup 是免费的吗?
是的,Pipeworx clickup 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Pipeworx clickup 支持哪些平台?
Pipeworx clickup 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Pipeworx clickup?
由 Bruce Gutman(@b-gutman)开发并维护,当前版本 v1.0.0。
推荐 Skills