The Agent Skills Directory

[SAFE]: No security issues detected. The skill is an instructional guide for API integration.
[COMMAND_EXECUTION]: The skill instructs the agent to use curl for network requests and python3 -m json.tool for response formatting. These are standard utilities used according to their intended design for interacting with web services.
[DATA_EXFILTRATION]: The skill communicates with api.linear.app, which is the official endpoint for the Linear service. This network activity is necessary for the skill's stated purpose and does not involve unauthorized data transfer.
[CREDENTIALS_UNSAFE]: The skill correctly directs users to provide the LINEAR_API_KEY via environment variables, adhering to secure secret management practices and avoiding hardcoded credentials.
[PROMPT_INJECTION]: The skill interacts with external data from Linear (issue titles, descriptions, and comments). While this is an ingestion surface for indirect prompt injection, it is a standard characteristic of project management tools and is handled safely within the scope of these instructions.

linear