triage
Warn
Audited by Socket on Oct 9, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The stated purpose is coherent, but the implementation relies on unverifiable local CLIs—especially `lc`, which appears not to be an official Linear-owned tool based on the evidence. Because such a binary likely receives Linear credentials and project data, the skill carries high supply-chain and credential-forwarding risk despite otherwise reasonable functionality.
Confidence: 88%Severity: 84%
Audit Metadata