linear-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to interact withlinear-cli. These commands are standard for project management workflows (e.g., starting issues, creating branches, updating status) and do not show signs of malicious command injection or privilege escalation. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves issue context from an external source via
linear-cli context. - Ingestion points: Data is ingested from Linear issues when running
linear-cli contextinSKILL.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded content are provided.
- Capability inventory: The skill has access to the
Bashtool for local command execution. - Sanitization: There is no evidence of sanitization for the retrieved issue content. While this represents a surface for indirect prompt injection if an issue contains malicious text, it is a standard operational risk for this type of integration.
Audit Metadata