OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill facilitates Linear issue analysis but presents a high risk of credential exfiltration. It instructs the agent to pass the user's GitHub authentication token to external URLs found in untrusted Linear comments via curl. Additionally, it is vulnerable to indirect prompt injection by processing unsanitized external content from issues and comments.
Detected behaviors
1 alert: gptSecurity
No issues
1/1 file flagged