pp-linear

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the linear-pp-cli binary using npx from the @mvanhorn/printing-press-library package or via go install from the github.com/mvanhorn/printing-press-library repository. Both sources are vendor-controlled resources belonging to the skill author.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from a Linear workspace, including issue descriptions, comments, and project updates.
  • Ingestion points: Commands such as linear-pp-cli issues, linear-pp-cli comments list, linear-pp-cli documents, and linear-pp-cli projects fetch untrusted content from the Linear API.
  • Boundary markers: The instructions do not specify the use of delimiters or specific 'ignore' instructions when the agent processes retrieved content.
  • Capability inventory: The skill allows network operations (Linear API and optional webhooks), file system reads/writes (via --description-file, --body-file, and --deliver file:<path>), and execution of the linear-pp-cli binary.
  • Sanitization: No explicit sanitization or filtering of retrieved Linear content is mentioned in the prompt instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:45 AM