linear
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Local Command Execution: The skill utilizes
npxto execute theemulatepackage locally. This is a common pattern for running development utilities without global installation, allowing for a stateful Linear API environment on the user's machine. - External Package Dependency: Using
npxinvolves downloading and executing code from the npm registry at runtime. This is standard behavior for Node.js-based development tools and is used here to provide the emulation functionality. - Local Network Activity: The emulator defaults to running on
localhost(ports 4000 or 4012). This keeps the development traffic contained within the local machine, which is a secure practice for testing integrations before connecting to live services. - Credential Management for Testing: The skill includes example configuration and tokens (e.g.,
lin_test_admin). These are clearly marked as test credentials for the local emulator environment and do not represent the exposure of real production secrets.
Audit Metadata