project-health-check
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs several automated shell operations to maintain the project environment.
- Uses
gitextensively in Check 1 to manage stashing, branch switching, and fast-forwarding themainbranch. - Executes
npx skills update --project --yesin Check 2 to refresh the agent's installed capabilities. - [EXTERNAL_DOWNLOADS]: The skill initiates remote downloads to keep components updated.
- The
npxcommand in Check 2 fetches and executes the latest version of theskillspackage from the npm registry. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks due to its integration with external task management software.
- Ingestion points: Untrusted data enters the agent context via the Linear API when fetching open tickets and backlog items in Check 3.
- Boundary markers: None are present; there are no instructions to the agent to treat ticket content as data only or to ignore embedded instructions within ticket descriptions.
- Capability inventory: The skill has the capacity to modify the local filesystem (via
gitand skill updates) and initiates theshipskill to perform further code modifications. - Sanitization: There is no mention of filtering, escaping, or validating the content of Linear tickets before the agent evaluates them to decide on the next 'ship' action.
Audit Metadata