linear
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard
curlcommands to interact with the official Linear GraphQL API (https://api.linear.app/graphql). These commands are documented as best-practice examples for developers. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage their sensitive
LINEAR_API_KEYusing environment variables rather than hardcoding them, which is a recommended security practice. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.linear.app, which is the official endpoint for a well-known project management service. These requests are for legitimate API interaction. - [DATA_EXFILTRATION]: No evidence of data exfiltration was found. The network operations are scoped to the intended service (Linear) and do not involve accessing or sending local sensitive files.
Audit Metadata