linear-projects
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions utilize the Bash tool to run
linear-clifor common project management operations like listing, viewing, and creating projects. - [PROMPT_INJECTION]: There is a potential for indirect prompt injection because the skill ingests data from Linear projects which could contain adversarial instructions.
- Ingestion points: Project information retrieved from
linear-cli p listandlinear-cli p getin SKILL.md. - Boundary markers: No specific delimiters or safety instructions are used to separate external project data from the agent's instructions.
- Capability inventory: The skill enables the agent to interact with the Linear platform through CLI commands.
- Sanitization: The skill lacks mechanisms to sanitize or validate the external data before it is processed by the model.
Audit Metadata