launch-smoke-test
End-to-end smoke test for the `tessl launch skill --cloud` pipeline. Reads one Linear issue (read-only) via the Linear API to prove `LINEAR_TOKEN` is wired into the sandbox, appends a single run-marker line to a log file, then opens a GitHub pull request with that one-line change to prove `GITHUB_TOKEN` and the publish path work. Use whenever you need to verify a cloud launch can reach Linear and GitHub and open a PR end to end -- dogfooding the launch pipeline, checking that credentials forward into the sandbox, or as a minimal known-good skill to launch when debugging the launch flow itself. Self-contained: driven by launcher-supplied inputs plus `LINEAR_TOKEN` and `gh` credentials in the environment. Makes no Linear writes; its only change is the one appended log line in the PR it opens.
72
90%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow reads a Linear issue via the Linear API (`https://api.linear.app/graphql`), which ingests outsider-authored free text (issue titles) into the agent's context.
- Repository
- drew-tessl/repo-schedules-test
- Commit
e75c51f
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.