linear
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlfor all API interactions with Linear's GraphQL endpoint (https://api.linear.app/graphql). It also usespython3 -m json.toolto format the JSON output for readability, which is a standard and safe practice for shell-based API interactions. - [EXTERNAL_DOWNLOADS]: All network operations are directed to
api.linear.app, which is the official domain for Linear, a well-known project management service. These operations are limited to authenticated API queries and mutations for issue management. - [SAFE]: The skill adheres to security best practices by requiring the
LINEAR_API_KEYto be provided via environment variables rather than being hardcoded. No obfuscation, persistence mechanisms, or unauthorized data access patterns were detected.
Audit Metadata