Agent skill · software engineering · jeremylongshore
clickup-prod-checklist
Issue an evidence-backed go or no-go decision for a ClickUp integration across auth, versions, plans, data, limits, webhooks, recovery, and ownership. Use when reviewing a production launch or major change. Trigger with "ClickUp production checklist", "ClickUp go-live", or "review ClickUp release".
Why this skill is useful
Adds a comprehensive production readiness checklist and executable scripts for ClickUp API v2 integrations that are not available in public documentation.
What it needs
Requires curl, python3 installed locally. Requires clickup account access. About 2k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
ClickUp Production Readiness Review Overview Turn launch readiness into verifiable controls and named blockers rather than a generic checkbox list. Prerequisites A release candidate, endpoint/version inventory, Workspace/environment matrix, and rollback artifact Current plan/feature facts, auth ownership, data policy, SLOs, and incident runbook Offline and bounded live test receipts Tool Discipline Use Read, Glob, and Grep to inspect the repository, adapters, configuration names, tests, and evidence. Use WebFetch only for current official ClickUp documentation. Use Write or Edit after confirming the target file, Workspace boundary, and requested mode. Current Contract v2/v3 routes are reviewed individually; auth and plan success in one endpoint does not prove another. Rate behavior is tested using per-token headers and bounded retry policy. Webhook readiness includes HTTPS, raw-body HMAC, idempotency, queue durability, health monitoring, and reconciliation. No launch is approved with unresolved cross-Workspace writes or secret/content leakage. Authentication Use a personal token only for accountable individual/testing work or OAuth Authorization Code for a user-facing integration. Inject the token server-side through a governed secret reference, send it in Authorization, verify authorized Workspace IDs, and never print the token, OAuth client secret, or webhook secret. Instructions 1. Verify artifact provenance, dependency locks, endpoint versions, schema fixtures, and rollback. 2. Verify personal/OAuth ownership, redirect/state controls, secret injection, rotation, and Workspace guards. 3. Review data minimization, logging, retention, deletion, backup, and incident access. 4. Exercise rate, pagination, timeout, 5xx, webhook retry/suspension, queue replay, and partial-write paths. 5. Run a bounded read-only live probe and any separately approved synthetic canary. 6. Record PASS/FAIL/NA evidence, owners, expiry dates, blockers, and final decision. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/clickup-prod-checklist