linear Audit-Bericht.

Warnungen

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• Financial research output is not financial advice; require human review before any live investment decision
• Destructive actions such as delete, trash, and archive are exposed without documentation of explicit confirmation or dry-run safeguards beyond the team-target gate.
• SKILL.md does not warn agents to treat Linear content (issue titles, descriptions, comments) as untrusted data, leaving potential prompt-injection risk when an agent reads and acts on fetched content.
• The documentation does not specify minimum required API key scopes or recommend a least-privilege key for the Linear integration.
• Financial research output is not financial advice; require human review before any live investment decision.
• Quality score needs review
• Permission surface needs review: secrets or environment access, shell or command execution
• GitHub adoption: 65 GitHub stars
• Stars/forks activity: 65 stars, 25 forks; issue activity unavailable in current metadata
• Dependency/runtime risk: command execution surface, credential or environment access

Methode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.