linear
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external source (Linear issues, projects, and documents) and possesses write capabilities.
- Ingestion points: Data enters the agent context via tools such as
get_issue,list_comments,get_document, andsearch_documentationinSKILL.md. - Boundary markers: The instructions do not specify delimitation or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The skill can perform modifications via
create_issue,update_issue,create_comment, andcreate_projectacross its scripts. - Sanitization: No explicit sanitization or validation of the external content is mentioned.
- [EXTERNAL_DOWNLOADS]: The skill references and downloads components from official Linear and project-related services.
- Evidence: Fetches configuration from
https://mcp.linear.app/mcpand usesnpxto retrievemcp-remotefrom the npm registry. - [REMOTE_CODE_EXECUTION]: The troubleshooting section suggests running a remote transport client via
npx. - Evidence: Instructs the environment to run
npx -y mcp-remote https://mcp.linear.app/sseto establish a connection to the Linear MCP server.
Audit Metadata