linearis-cli
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements defensive coding practices, including the use of absolute paths for system binaries such as
/usr/bin/curland/bin/ddto prevent potential PATH hijacking. - [SAFE]: Sensitive authentication management is handled with care; the proxy transport in
linear-write-proxy.mjsensures authentication tokens are passed to the HTTP client via stdin (using curl's--config -feature) to avoid exposure in the system process table or on disk. - [SAFE]: The configuration resolution engine in
scripts/execution-core/config.mjsincludes explicit validation guards against prototype pollution in the_setDotPathutility function. - [SAFE]: Logging and telemetry logic in
scripts/execution-core/linear-write-proxy.mjsincludes a dedicated scrubbing function to identify and redact secrets (tokens, bearer headers) before they can reach log files or event streams. - [SAFE]: Network operations are strictly scoped to the official Linear API and the developer's own cloud infrastructure, consistent with the vendor identity and the skill's stated administrative purpose.
Audit Metadata