linear
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and connects to official Linear infrastructure at
https://mcp.linear.app/mcpandhttps://mcp.linear.app/ssefor its Model Context Protocol (MCP) server functionality. - [COMMAND_EXECUTION]: Instructions are provided for the user to configure the environment using the
codexCLI andnpx. These include adding the MCP server, enabling the remote client, and performing OAuth login to secure access to the Linear workspace. - [DATA_EXFILTRATION]: The skill processes content from the user's Linear workspace, which involves inherent ingestion of external data.
- Ingestion points: Issue details, search results, and comments fetched via tools such as
get_issueandsearch_documentationinSKILL.md. - Boundary markers: None identified; the agent relies on its internal safety guidelines when processing fetched content.
- Capability inventory: The skill can perform write operations back to Linear, such as
create_issue,update_issue, andcreate_comment, as documented inSKILL.md. - Sanitization: No explicit sanitization logic is present within the skill's instructions for the fetched data.
- [SAFE]: No malicious behavior, obfuscation, or unauthorized data exfiltration patterns were detected. The skill's operations are consistent with its stated purpose of managing a Linear project management workflow.
Audit Metadata