linear-initiatives
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): The skill contains straightforward documentation and command examples for the
linear-cli. There is no evidence of prompt injection, hardcoded credentials, or malicious scripts. - [Indirect Prompt Injection] (SAFE): The skill is designed to process external data from the Linear CLI, which serves as an ingestion point for untrusted content (e.g., initiative titles or descriptions).
- Ingestion points: CLI output from
linear-cli init listandlinear-cli init get. - Boundary markers: None present in the provided instructions.
- Capability inventory: The skill uses the Bash tool to execute CLI commands.
- Sanitization: No explicit sanitization or validation of the CLI output is defined.
Audit Metadata