manage-linear-issue

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows security best practices by implementing a mandatory 'Preview & Confirmation' step. This ensures that no data is written to the external Linear service without the user first reviewing and approving the full content of the draft.
  • [COMMAND_EXECUTION]: The skill utilizes standard, localized shell commands to retrieve repository metadata and configuration, such as git remote get-url origin, git rev-parse HEAD, and cat .linear.json. These operations are used solely to establish context and build GitHub permalinks for the issues.
  • [DATA_EXFILTRATION]: Although the skill accesses local workspace data (including configuration files and small code snippets), this information is only sent to the user's configured Linear instance. The data transfer is restricted to the specific project scope and is subject to the mandatory user approval gate.
  • [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it ingests data from the workspace (such as code snippets) to populate issue descriptions. This risk is mitigated by the mandatory manual review of the drafted markdown before submission.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 11:17 PM
Security Audit — agent-trust-hub — manage-linear-issue