linear-batch-close

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/verify_closeout.ts utility executes local git commands to verify PR merge status and CI success. It uses execFile rather than a shell and validates that repository paths are relative, which reduces the risk of command injection.
  • [SAFE]: The skill utilizes a comprehensive validation framework in scripts/validate_marked_comments.ts to parse and verify structured data within Linear comments against predefined JSON schemas. This architecture minimizes the risk of indirect prompt injection by ensuring only schema-compliant data influences the agent's workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 11:48 AM
Security Audit — agent-trust-hub — linear-batch-close