linear-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and displays data from the Linear API (such as issue titles, team names, and user profiles) which could contain malicious instructions. If the agent reads these logs or console outputs, it could be influenced by content stored within the Linear platform.\n
- Ingestion points: Linear API response data processed in SKILL.md and references/implementation.md.\n
- Boundary markers: None identified; data is logged or printed as plain text.\n
- Capability inventory: The skill uses Bash(node:) and Bash(npx:) to execute debugging logic.\n
- Sanitization: No validation or sanitization of API data is performed before it is output to the console.\n- [COMMAND_EXECUTION]: The skill utilizes shell commands (curl) for diagnostic checks and readline for an interactive command-line interface to query the Linear API.
Audit Metadata