linear

Warn

Audited by Socket on May 14, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's functionality matches its stated Linear purpose, but its data flow is not direct-to-Linear: it requires a Maton API key and routes all requests and managed OAuth through Maton-controlled proxy/control domains. That third-party mediation is a meaningful security and privacy risk even without malicious installer behavior.

Confidence: 89%Severity: 66%
Audit Metadata
Analyzed At
May 14, 2026, 12:16 AM
Package URL
pkg:socket/skills-sh/CraftOS-dev%2FCraftBot%2Flinear%2F@ce65b18e611a32a3e529fa5e2803c053fa68aafb
Security Audit — socket — linear