linear

The skill presents a coherent and proportionate footprint for its stated purpose: it uses an internal, session-bound GraphQL client to perform Linear operations (queries, mutations, attachments) with a controlled file-upload workflow. There are no evident download/install chains, no exposure of credentials beyond the app-server session, and data flows are consistent with official API usage. Overall risk remains low to moderate (securityRisk around 0.25), with no high-risk patterns detected (no external exfiltration, no unverifiable binaries, and no autonomous real-world actions).