start-task

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the workflow purpose is coherent, but the trust model is weakened by dependence on a third-party authenticated Linear CLI that can act on the user's workspace. Capabilities are mostly proportionate, yet external state changes and credential-bearing third-party tooling make this medium-high risk rather than benign.

Confidence: 85%Severity: 74%
Audit Metadata
Analyzed At
Apr 6, 2026, 08:17 AM
Package URL
pkg:socket/skills-sh/seangjr%2Fproduct-skills%2Fstart-task%2F@d2c0eb3cf818021f67240931ab5b090b82b7785d