linear-search

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses linear-cli to perform search and retrieval operations via the Bash tool.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from an external source (Linear.app).
  • Ingestion points: The skill retrieves issue summaries, descriptions, and comments using linear-cli s issues, linear-cli i get, and linear-cli cm list as shown in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between its instructions and the data fetched from Linear.
  • Capability inventory: The agent has access to the Bash tool to execute shell commands, as defined in the allowed-tools frontmatter.
  • Sanitization: There is no evidence of filtering or sanitization of the content fetched from Linear before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 07:13 AM
Security Audit — agent-trust-hub — linear-search