linear-export

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the linear-cli command-line tool to perform data export operations from the Linear service. These operations are restricted to the documented purpose of the skill.
  • [PROMPT_INJECTION]: The skill involves processing data from an external source (Linear API), which creates an attack surface for indirect prompt injection.
  • Ingestion points: Linear issue and project metadata fetched via linear-cli into the agent's context.
  • Boundary markers: None; there are no instructions to the agent to treat the exported data as untrusted or to use specific delimiters.
  • Capability inventory: The skill allows execution of Bash commands, specifically the linear-cli tool.
  • Sanitization: The instructions do not include steps for sanitizing, filtering, or validating the content retrieved from Linear before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 07:14 AM
Security Audit — agent-trust-hub — linear-export