linear
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and executes the
@useclawlink/clipackage from the NPM registry usingnpx. This package is the official tool provided by the skill's author, clawlink-hq. - [COMMAND_EXECUTION]: Utilizes shell commands (
npx @useclawlink/cli) to manage authentication, discover actions, and perform operations within a Linear workspace. - [DATA_EXPOSURE]: Authentication tokens are stored locally in the user's home directory at
~/.clawlink/credentials.json. This is standard behavior for CLI applications to maintain session state and does not constitute an unsafe exposure of existing system secrets.
Audit Metadata