linearis-cli

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements defensive coding practices, including the use of absolute paths for system binaries such as /usr/bin/curl and /bin/dd to prevent potential PATH hijacking.
  • [SAFE]: Sensitive authentication management is handled with care; the proxy transport in linear-write-proxy.mjs ensures authentication tokens are passed to the HTTP client via stdin (using curl's --config - feature) to avoid exposure in the system process table or on disk.
  • [SAFE]: The configuration resolution engine in scripts/execution-core/config.mjs includes explicit validation guards against prototype pollution in the _setDotPath utility function.
  • [SAFE]: Logging and telemetry logic in scripts/execution-core/linear-write-proxy.mjs includes a dedicated scrubbing function to identify and redact secrets (tokens, bearer headers) before they can reach log files or event streams.
  • [SAFE]: Network operations are strictly scoped to the official Linear API and the developer's own cloud infrastructure, consistent with the vendor identity and the skill's stated administrative purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 09:29 PM
Security Audit — agent-trust-hub — linearis-cli