linear
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution via npx: The skill utilizes npx to run the emulate tool. This involves downloading and executing Node.js code from a registry. This is a common pattern for CLI tools and is used here to set up the local emulation environment.
- Local Network Activity: The emulator defaults to running on localhost (port 4000 or 4012). This restricts network exposure to the local machine, which is a secure practice for testing integrations.
- Hardcoded Test Credentials: The skill's documentation and seed configuration include example API tokens and client secrets (e.g., lin_test_admin). These are intended for local test environments and do not represent production credentials.
- Indirect Prompt Injection Surface: The emulated API allows untrusted data ingestion via GraphQL mutations (e.g., issueCreate and commentCreate in SKILL.md). There are no boundary markers or explicit sanitization steps described to mitigate embedded instructions. The skill has the capability to execute shell commands (npx emulate), creating an attack surface if processed data influences future tool calls.
Audit Metadata