start-task
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and recommends the installation of the
linear-clifrom a third-party GitHub repository (github.com/schpet/linear-cli) if the tool is missing from the environment. While common for this workflow, the repository is not from a verified organization. - [PROMPT_INJECTION]: The skill processes untrusted data from external sources (Linear issue descriptions and comments) which could contain malicious instructions designed to influence agent behavior during the planning phase.
- Ingestion points: Data enters the context via
linear issue view $ISSUE_IDoutput as described inSKILL.md. - Boundary markers: Absent. The skill does not use specific delimiters or instructions to ignore embedded commands within the fetched issue data.
- Capability inventory: The agent has access to
Bash(executing git and linear commands),Read,Glob, andGreptools. - Sanitization: Absent. There is no evidence of filtering or validation of the content retrieved from the Linear API before it is used to generate implementation plans.
Audit Metadata