The Agent Skills Directory

Unverifiable Dependencies (MEDIUM): The linear shell script automatically executes npm install if node_modules is not present. This triggers the download and execution of packages from the npm registry at runtime without manual intervention.
Indirect Prompt Injection (LOW): The skill ingests untrusted data from the Linear platform (titles, descriptions, comments) which could contain malicious instructions designed to manipulate the agent. 1. Ingestion points: Commands linear issue view and linear issue list fetch external content. 2. Boundary markers: None identified. 3. Capability inventory: The skill can create, update, and delete issues. 4. Sanitization: No sanitization or escaping of external content is documented or performed in the wrapper script.

linear