linear-api
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- Standard API Interaction: The skill communicates exclusively with the official Linear API endpoint (
api.linear.app). All network operations are aligned with the skill's stated purpose of managing Linear workspace data. - Secure Credential Handling: The skill relies on environment variables for authentication, which are intended to be managed by the host environment. It explicitly advises against manual token creation or manipulation, following least-privilege principles.
- Safe Query Construction: The bundled utility script (
scripts/linear_issues.sh) employsjqto safely interpolate variables into GraphQL queries. This practice prevents common shell injection issues and ensures data is properly formatted before being sent to the API. - Data Processing Considerations: As a tool for managing issues and comments, the skill necessarily processes external Markdown content. While this content originates from within a controlled workspace, users should be aware that the agent will interpret this data as part of its context, which is standard behavior for project management integrations.
Audit Metadata