triage
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially malicious content from external Linear issues.
- Ingestion points: Linear issue data is fetched using
lc issue listandlc issue mineas described in Step 2 of SKILL.md. - Boundary markers: The skill lacks explicit markers or instructions for the agent to treat the retrieved issue content as data rather than instructions.
- Capability inventory: The skill utilizes capabilities including writing to the Linear API (
lc issue update) and local shell command execution for branch management (gbr). - Sanitization: No escaping or validation is performed on the content retrieved from Linear before it is processed by the agent.
Audit Metadata