linear

SUSPICIOUS: the skill is broadly aligned with Linear ticket management, but its core write path relies on a community third-party CLI that receives the user's Linear API token. The install path is relatively trustworthy for open-source npm software, so this is not confirmed malware, but credential forwarding plus reduced transparency ('skip silently') make the skill higher risk than a direct official API integration.