linear-deploy-integration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill employs standard Git commands and deployment CLI tools (Vercel, Google Cloud Run, Railway) to automate deployment tracking. These operations are within the scope of its intended purpose and use restricted tool sets as defined in the skill configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted commit message data from repository history. It implements robust sanitization by using strict regular expression filters (
/[A-Z]+-\d+/g) to extract only valid Linear issue identifiers, effectively preventing arbitrary data from being passed to API endpoints. - [CREDENTIALS_UNSAFE]: The integration guide correctly emphasizes the use of environment variables and platform-specific secret management (e.g., GitHub Secrets, Vercel secrets) for handling sensitive API keys and tokens, rather than embedding them in scripts.
Audit Metadata