linear-claude-skill
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from Linear issues, projects, and comments which are external and could contain malicious instructions.\n
- Ingestion points: Data is retrieved through the
linearCLI and GraphQL queries executed by local scripts (SKILL.md).\n - Boundary markers: There are no specified delimiters or instructions to treat external data as untrusted text rather than commands.\n
- Capability inventory: The skill has the ability to execute shell commands via the
linearCLI and run TypeScript scripts to modify project data (SKILL.md).\n - Sanitization: No sanitization logic is described for handling external Linear content before it enters the agent's context.\n- [DYNAMIC_EXECUTION]: Core functionality is implemented through local TypeScript scripts executed at runtime.\n
- Evidence: Frequent use of
npx tsxto run scripts such asscripts/setup.ts,scripts/query.ts, andscripts/linear-ops.ts(SKILL.md).\n- [REMOTE_CODE_EXECUTION]: The skill is designed to interact with the official Linear MCP server.\n - Evidence: Configuration instructions suggest using
npx mcp-remote https://mcp.linear.app/sseto connect to Linear's official remote server (SKILL.md).\n- [COMMAND_EXECUTION]: The skill relies on executing thelinearCLI for many of its operations.\n - Evidence: Documentation includes examples of
linear issues view,linear issues create, andlinear issues comment(SKILL.md).\n- [EXTERNAL_DOWNLOADS]: The skill usesnpxto download and run thetsxandmcp-remotepackages.\n - Evidence: Usage of
npx tsxandnpx mcp-remoteimplies downloading these tools from the NPM registry if they are not already cached (SKILL.md).
Audit Metadata