linear
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute a local Python script (
scripts/linear) using theBashtool to perform Linear workspace operations. - [EXTERNAL_DOWNLOADS]: The skill performs authorized network requests to
https://api.linear.app/graphql. Linear is recognized as a well-known and legitimate service. - [DATA_EXFILTRATION]: The skill transmits project and issue data to the Linear API. It handles authentication securely via environment variables (
LINEAR_API_KEYorLINEAR_ACCESS_TOKEN), avoiding the use of hardcoded secrets. - [SAFE]: No malicious patterns, obfuscation, or unauthorized access to sensitive local data were detected. The inclusion of mandatory confirmation gates for mutations and offline tests demonstrates a high standard of security design.
Audit Metadata