linear-status
Warn
Audited by Snyk on Jul 11, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.78). SKILL.md requires running
scripts/validate_marked_comments.tson an<issue-description-file>and<comment-file>, which are populated from Linear MCP reads (get_issue/list_comments)—i.e., outsider-authored issue description and comments—so their free text/marked YAML is ingested into the LLM context via the agent’s evidence/validation flow.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata