linear-skill

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill communicates with the official Linear API (https://api.linear.app/graphql). This is a well-known service and the interaction is required for the skill's core functionality. No sensitive local files are accessed or transmitted.\n- [PROMPT_INJECTION]: The skill ingests issue data from an external source (Linear). While this creates a surface for indirect prompt injection, it is the primary purpose of the skill and is handled via structured JSON output. Ingestion points: Linear issue titles and descriptions; Boundary markers: JSON output structure; Capability inventory: Linear API write operations; Sanitization: Descriptions are truncated to 200 characters.\n- [SAFE]: The skill uses only Python's standard library and does not include any third-party dependencies, obfuscation, or persistence mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 03:20 PM