linear
Fail
Audited by Snyk on Apr 25, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 0.90). The skill tells the agent to ask the user to provide LINEAR_API_KEY if it’s missing and includes curl examples with an Authorization header, which encourages the agent to receive and potentially embed the API key verbatim in generated commands, creating an exfiltration risk.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata