Linear
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or security vulnerabilities were detected. The skill implementation is consistent with its stated purpose of managing Linear projects.
- [EXTERNAL_DOWNLOADS]: Interacts exclusively with Linear's official GraphQL API at
api.linear.appand uses the standard@linear/sdkpackage for authenticated operations. - [COMMAND_EXECUTION]: Utilizes local shell scripts (
run.sh,post-edit.sh) and Node.jsexecSyncfor internal delegation and setup procedures. These operations are scoped to the skill's own directory and standard development workflows. - [DATA_EXFILTRATION]: While the skill transmits data to a remote server, it is restricted to the official Linear API. The documentation and scripts include explicit safeguards (such as Varlock integration patterns) to prevent the accidental exposure of sensitive API keys in the agent's context or terminal logs.
Audit Metadata