Skip to main content

linear-core-workflow-b

Facilitates project and cycle management using Linear, enabling effective sprint planning and roadmap organization.

Install this skill

or
36/100

Security score

The linear-core-workflow-b skill was audited on May 12, 2026 and we found 16 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 53

Template literal with variable interpolation in command context

SourceSKILL.md
53console.log(`${project.name} [${project.state}] — progress: ${Math.round(project.progress * 100)}%`);
medium line 69

Template literal with variable interpolation in command context

SourceSKILL.md
69console.log(`Created project: ${project?.name} (${project?.id})`);
medium line 101

Template literal with variable interpolation in command context

SourceSKILL.md
101console.log(` Milestone: ${ms.name} — target: ${ms.targetDate}`);
medium line 124

Template literal with variable interpolation in command context

SourceSKILL.md
124console.log(` ${issue.identifier}: ${issue.title} [${state?.name}]`);
medium line 138

Template literal with variable interpolation in command context

SourceSKILL.md
138console.log(`${cycle.name ?? "Unnamed"}: ${cycle.startsAt} → ${cycle.endsAt}`);
medium line 154

Template literal with variable interpolation in command context

SourceSKILL.md
154console.log(`Created cycle: ${cycle?.name}`);
medium line 194

Template literal with variable interpolation in command context

SourceSKILL.md
194console.log(`Sprint progress: ${metrics.burndown}% (${metrics.completedPoints}/${metrics.totalPoints} pts)`);
medium line 211

Template literal with variable interpolation in command context

SourceSKILL.md
211console.log(`Rolled over ${moved} unfinished issues`);
medium line 243

Template literal with variable interpolation in command context

SourceSKILL.md
243console.log(`Average velocity: ${velocity.average} pts/sprint`);
medium line 263

Template literal with variable interpolation in command context

SourceSKILL.md
263progress: `${Math.round(p.progress * 100)}%`,
medium line 296

Template literal with variable interpolation in command context

SourceSKILL.md
296name: `Sprint ${new Date().toISOString().slice(0, 10)}`,
medium line 306

Template literal with variable interpolation in command context

SourceSKILL.md
306console.log(`Sprint created: ${cycle?.name} (${issueIds.length} issues)`);
low line 40

Access to .env file

SourceSKILL.md
40const client = new LinearClient({ apiKey: process.env.LINEAR_API_KEY! });
low line 312

External URL reference

SourceSKILL.md
312- [Project Model Schema](https://studio.apollographql.com/public/Linear-API/variant/current/schema/reference/objects/Project)
low line 313

External URL reference

SourceSKILL.md
313- [Cycle Model Schema](https://studio.apollographql.com/public/Linear-API/variant/current/schema/reference/objects/Cycle)
low line 314

External URL reference

SourceSKILL.md
314- [Linear Roadmaps Documentation](https://linear.app/docs/roadmaps)
Scanned on May 12, 2026
View Security Dashboard
Installation guide →