linear
Warn
Audited by Socket on Apr 25, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill's overall purpose matches Linear project management, and its main network flow is to Linear's official API. However, it depends on an unaffiliated third-party CLI, forwards the user's API token into that CLI, uses an unpinned global install, and contains inconsistent authentication guidance. This is not clearly malicious, but the install trust and credential-forwarding footprint are higher-risk than a tightly scoped official integration.
Confidence: 86%Severity: 62%
Audit Metadata