linearis

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The skill instructs the agent to read an API key from a local configuration file and interpolate it verbatim into a curl Authorization header (-H "Authorization: Bearer "), exposing the secret to the LLM's context and output.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow reads Linear tickets and comments through a customer's tenant mirror API, which ingests tickets and comments authored by outsiders.