linear
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to read and process content from a Linear workspace, which serves as an ingestion point for untrusted data. (1) Ingestion points: Issue descriptions, project data, and comments fetched via tool calls like
get_issueorlist_comments(documented inSKILL.md). (2) Boundary markers: There are no specific instructions for the agent to use delimiters or ignore embedded instructions when processing workspace data. (3) Capability inventory: The skill includes tools to create or modify issues, labels, and comments, providing a path for potential multi-step injection effects. (4) Sanitization: No content validation or sanitization steps are defined for data retrieved from the workspace. - [EXTERNAL_DOWNLOADS]: Instructions in
references/setup.mdguide the user to usenpxto fetch and run themcp-remotepackage, enabling connection to the official Linear MCP endpoint. - [COMMAND_EXECUTION]: The skill documentation includes setup commands for the Codex environment and configuration snippets for Windows/WSL that utilize shell commands for integration purposes.
Audit Metadata