linear-plan-build

SUSPICIOUS: the skill’s purpose mostly matches its capabilities, and its external services are official, but the footprint is high-risk because it grants broad autonomous code-execution and outward actions (push/PR/tracker updates) while consuming untrusted ticket and review content. Main concern is high operational autonomy plus indirect prompt-injection exposure, not confirmed malware.