linear
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and code snippets for the Linear GraphQL API. All external references are to official Linear domains.
- [SAFE]: Secret management follows industry standards by advising the use of environment variables and explicitly warning against committing secrets to public repositories.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for fetching external content (issue descriptions and titles) that may contain untrusted data. • Ingestion points: GraphQL query for
assignedIssuesinSKILL.md. • Boundary markers: None present in the provided examples. • Capability inventory: Shell command execution (curl), HTTP requests (requests), and filesystem operations (git). • Sanitization: No sanitization or validation of the retrieved issue content is demonstrated.
Audit Metadata