use-linear

Warn

Audited by Socket on Jul 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill is purpose-aligned for Linear workflow management, but it relies on a non-official third-party CLI that receives Linear credentials and can perform real mutations. Because install sources are publicly documented and not overtly deceptive, this looks more like a trust/supply-chain and credential-forwarding concern than confirmed malware.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Jul 23, 2026, 10:19 PM
Package URL
pkg:socket/skills-sh/jamesacarr%2Fagent-skills%2Fuse-linear%2F@7df77088520dd8b9e3bab89670dd8d0de7f81fd9b3812756f028fd94810a3d52