Skip to main content

linear-enterprise-rbac

Facilitates enterprise role-based access control in Linear, enhancing team permissions and SSO management for integrations.

Install this skill

or
71/100

Security score

The linear-enterprise-rbac skill was audited on Feb 25, 2026 and we found 9 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 161

Template literal with variable interpolation in command context

SourceSKILL.md
161return transitions.includes(`${fromState}->${toState}`);
medium line 167

Template literal with variable interpolation in command context

SourceSKILL.md
167`User ${this.userContext.email} cannot create issues in team ${teamKey}`
medium line 178

Template literal with variable interpolation in command context

SourceSKILL.md
178`User ${this.userContext.email} cannot update issues in team ${team?.key}`
medium line 229

Template literal with variable interpolation in command context

SourceSKILL.md
229`Cannot transition from ${currentState?.name} to ${newState.name}`
medium line 293

Template literal with variable interpolation in command context

SourceSKILL.md
293throw new Error(`Unknown SSO provider: ${config.provider}`);
low line 410

Access to .env file

SourceSKILL.md
410apiKey: process.env.LINEAR_API_KEY!,
low line 438

External URL reference

SourceSKILL.md
438- [Linear OAuth Documentation](https://developers.linear.app/docs/oauth)
low line 439

External URL reference

SourceSKILL.md
439- [RBAC Best Practices](https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html)
low line 440

External URL reference

SourceSKILL.md
440- [SSO Integration Guide](https://linear.app/docs/sso)
Scanned on Feb 25, 2026
View Security Dashboard