onboarding-coordination
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface as it is designed to interact with external data from Linear (issue descriptions, comments, and project plans).
- Ingestion points: Data enters the agent context through the
mcp__linear__*toolset and theReadtool as referenced inSKILL.mdandreference/INDEX.md. - Boundary markers: None identified in the provided documentation to delimit external data from agent instructions.
- Capability inventory: The skill has access to powerful tools including
Bash,Write, and the full suite ofmcp__linear__*tools for task management. - Sanitization: No explicit sanitization or input validation logic is described in the provided files.
- [COMMAND_EXECUTION]: The skill explicitly allows the use of the
Bashtool in its configuration. This is consistent with its stated purpose of environment setup and onboarding automation, but users should be aware that the agent can execute shell commands to fulfill its tasks.
Audit Metadata