OpenAI Codex security directory
ClickUp
Published by ClickUp
High risk
Connects Codex to your ClickUp workspace. Search work, ask questions and create, update or manage items in conversation.
Security assessment
Plutonium assessed this plugin for permissions, capabilities, and security-relevant behavior.
- Delete task tool documented: Can delete records, files, projects, messages, or resources that may be difficult to recover.
- Creates/updates tasks, lists, folders, docs and time entries: Can create or change persistent records, files, projects, permissions, settings, or credentials.
- Searches whole workspace incl. members and chat channels: Can read private account, workspace, repository, message, analytics, or file data.
- Sends ClickUp chat messages and task comments as the user: Can send messages, comments, invitations, posts, or published content attributed to the connected user.
The interactive security report will load automatically.