pp-linear
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
linear-pp-clibinary usingnpxfrom the@mvanhorn/printing-press-librarypackage or viago installfrom thegithub.com/mvanhorn/printing-press-libraryrepository. Both sources are vendor-controlled resources belonging to the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external data from a Linear workspace, including issue descriptions, comments, and project updates.
- Ingestion points: Commands such as
linear-pp-cli issues,linear-pp-cli comments list,linear-pp-cli documents, andlinear-pp-cli projectsfetch untrusted content from the Linear API. - Boundary markers: The instructions do not specify the use of delimiters or specific 'ignore' instructions when the agent processes retrieved content.
- Capability inventory: The skill allows network operations (Linear API and optional webhooks), file system reads/writes (via
--description-file,--body-file, and--deliver file:<path>), and execution of thelinear-pp-clibinary. - Sanitization: No explicit sanitization or filtering of retrieved Linear content is mentioned in the prompt instructions.
Audit Metadata