linear-mcp
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and processes data from the Linear API.
- Ingestion points: Data such as issue titles, descriptions, and comments are retrieved through tools like LINEAR_GET_LINEAR_ISSUE and LINEAR_RUN_QUERY_OR_MUTATION (SKILL.md).
- Boundary markers: Absent. The instructions do not include delimiters or specific guidance to the agent to disregard instructions found within the ingested data.
- Capability inventory: The agent has the ability to write to the Linear system (create issues, comments, labels) based on the processed data, presenting a potential abuse path.
- Sanitization: Absent. There is no mechanism described for sanitizing or validating retrieved external data before it is added to the agent's context.
Audit Metadata