linear-create-issue
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local TypeScript utility scripts to perform environment checks and data transformation.
scripts/detect_runner.tsprobes the system for available JavaScript runtimes usingspawnSyncon a hardcoded list of candidates.scripts/intake_issue.tsandscripts/linear_metadata.tsare used to parse user input and manage Linear metadata snapshots. These executions are constrained to the skill's own scripts and follow safe implementation patterns. - [PROMPT_INJECTION]: The skill acts as an ingestion point for untrusted user data by transforming rough reports into structured Linear issues.
- Ingestion points: Raw bug reports and feature ideas are ingested through user prompts and structured YAML files processed by
scripts/intake_issue.ts. - Boundary markers: The workflow uses markdown templates and specific field requirements to structure the output, although it lacks explicit boundary delimiters or 'ignore embedded instructions' markers for user-provided text in the final rendered body.
- Capability inventory: The agent can write to Linear issues via MCP tools (
save_issue) and execute local scripts via shell commands. - Sanitization: The helper scripts validate that the input is a valid YAML mapping and contains required fields, but do not perform content-level filtering or sanitization of the raw text for prompt injection payloads.
Audit Metadata