linear-api

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • Standard API Interaction: The skill communicates exclusively with the official Linear API endpoint (api.linear.app). All network operations are aligned with the skill's stated purpose of managing Linear workspace data.
  • Secure Credential Handling: The skill relies on environment variables for authentication, which are intended to be managed by the host environment. It explicitly advises against manual token creation or manipulation, following least-privilege principles.
  • Safe Query Construction: The bundled utility script (scripts/linear_issues.sh) employs jq to safely interpolate variables into GraphQL queries. This practice prevents common shell injection issues and ensures data is properly formatted before being sent to the API.
  • Data Processing Considerations: As a tool for managing issues and comments, the skill necessarily processes external Markdown content. While this content originates from within a controlled workspace, users should be aware that the agent will interpret this data as part of its context, which is standard behavior for project management integrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 11:17 PM
Security Audit — agent-trust-hub — linear-api