linear-sync

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements state transitions using stable internal IDs and types (e.g., 'started', 'completed') rather than mutable display names, preventing logic errors if a team renames their workflow columns.
  • [SAFE]: The skill provides a --dry-run flag via arguments, allowing users to preview changes without executing any save_issue write operations, which is a significant safety feature for automation tools.
  • [SAFE]: Input handling for issue key extraction includes explicit instructions to escape regex metacharacters, mitigating potential regex injection or performance issues if complex strings are added to the configuration.
  • [SAFE]: The skill uses a neutral config.example.json template, ensuring that sensitive repository-specific configuration is not hardcoded or accidentally shared.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 12:05 PM
Security Audit — agent-trust-hub — linear-sync