managing-linear

Pass

Audited by Gen Agent Trust Hub on Mar 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the npx command throughout its workflow to execute the linearis CLI tool.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the linearis package from the npm registry using npx -y. Additionally, it includes functionality to download file embeds from remote Linear asset URLs to the local filesystem.
  • [PROMPT_INJECTION]: The skill is subject to indirect prompt injection because it ingests and processes untrusted content from an external source (Linear API).
  • Ingestion points: Data enters the context via npx -y linearis issues read, npx -y linearis comments create (reading existing context), and npx -y linearis documents read as described in references/cli-reference.md.
  • Boundary markers: None. The skill does not instruct the agent to use delimiters or ignore embedded instructions when reading content from Linear.
  • Capability inventory: The skill has access to the Bash tool, allowing it to execute shell commands and write files to the /tmp directory.
  • Sanitization: No sanitization, escaping, or validation of the external content is performed before it is presented to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 28, 2026, 10:17 PM
Security Audit — agent-trust-hub — managing-linear