Skip to main content

linear-core-workflow-b

Facilitates project and cycle management using Linear, enabling effective sprint planning and roadmap organization.

Install this skill

or
37/100

Security score

The linear-core-workflow-b skill was audited on May 30, 2026 and we found 15 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 56

Template literal with variable interpolation in command context

SourceSKILL.md
56console.log(`${project.name} [${project.state}] — progress: ${Math.round(project.progress * 100)}%`);
medium line 72

Template literal with variable interpolation in command context

SourceSKILL.md
72console.log(`Created project: ${project?.name} (${project?.id})`);
medium line 105

Template literal with variable interpolation in command context

SourceSKILL.md
105console.log(` Milestone: ${ms.name} — target: ${ms.targetDate}`);
medium line 129

Template literal with variable interpolation in command context

SourceSKILL.md
129console.log(` ${issue.identifier}: ${issue.title} [${state?.name}]`);
medium line 144

Template literal with variable interpolation in command context

SourceSKILL.md
144console.log(`${cycle.name ?? "Unnamed"}: ${cycle.startsAt} → ${cycle.endsAt}`);
medium line 160

Template literal with variable interpolation in command context

SourceSKILL.md
160console.log(`Created cycle: ${cycle?.name}`);
medium line 201

Template literal with variable interpolation in command context

SourceSKILL.md
201console.log(`Sprint progress: ${metrics.burndown}% (${metrics.completedPoints}/${metrics.totalPoints} pts)`);
medium line 219

Template literal with variable interpolation in command context

SourceSKILL.md
219console.log(`Rolled over ${moved} unfinished issues`);
medium line 252

Template literal with variable interpolation in command context

SourceSKILL.md
252console.log(`Average velocity: ${velocity.average} pts/sprint`);
medium line 273

Template literal with variable interpolation in command context

SourceSKILL.md
273progress: `${Math.round(p.progress * 100)}%`,
medium line 307

Template literal with variable interpolation in command context

SourceSKILL.md
307name: `Sprint ${new Date().toISOString().slice(0, 10)}`,
medium line 317

Template literal with variable interpolation in command context

SourceSKILL.md
317console.log(`Sprint created: ${cycle?.name} (${issueIds.length} issues)`);
low line 43

Access to .env file

SourceSKILL.md
43const client = new LinearClient({ apiKey: process.env.LINEAR_API_KEY! });
low line 324

External URL reference

SourceSKILL.md
324- [Project Model Schema](https://studio.apollographql.com/public/Linear-API/variant/current/schema/reference/objects/Project)
low line 325

External URL reference

SourceSKILL.md
325- [Cycle Model Schema](https://studio.apollographql.com/public/Linear-API/variant/current/schema/reference/objects/Cycle)
Scanned on May 30, 2026
View Security Dashboard
Installation guide →