linear-planning
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data, such as meeting transcripts or 'rough ideas', which could contain malicious instructions designed to influence the agent's behavior. * Ingestion points: Intake phase in
SKILL.mdaccepts arbitrary text or output from the externalmeeting-notesskill. * Boundary markers: The skill uses structured markdown templates (templates/ticket.md,templates/project-brief.md) to isolate processed content. * Capability inventory: The skill has write access to a Linear workspace via MCP tools (save_project,save_milestone,save_issue). * Sanitization: The skill mandates a 'Preview & approve' gate (Phase 4) inSKILL.mdrequiring explicit user confirmation before any tool execution, providing a strong defense against automated prompt injection attacks. - [COMMAND_EXECUTION]: The skill invokes several Linear MCP tools to create and manage project data. * Evidence: Scripts in
rules/linear-mcp-contract.mdandrules/dependencies-and-search.mdutilize tools likelist_teams,save_project, andsave_issue. * Context: These commands are core to the skill's functionality and are protected by a strict create-order protocol and mandatory user review.
Audit Metadata