linear-api
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external data from the Linear API, creating a surface for indirect prompt injection where instructions embedded in issue titles or descriptions could influence agent behavior.
- Ingestion points: GraphQL query results and mutation responses retrieved via the
linear-clicommand (SKILL.md). - Boundary markers: Absent. The instructions do not define delimiters or provide system prompts to the agent to disregard potential instructions within the API output.
- Capability inventory: The skill utilizes the
Bashtool to executelinear-clifor network operations and file reading (SKILL.md). - Sanitization: Absent. No content filtering or validation is performed on the data returned from the external API before it is processed by the agent.
Audit Metadata