skills/lwlee2608/linear-cli/linear/Socket

linear

Warn

Audited by Socket on Jul 11, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS: The skill’s Linear-related purpose is coherent, but it relies on a personal third-party CLI installed via curl|bash and then passes a raw `LINEAR_API_KEY` to that executable. Because the binary/install path is not official or verifiably trustworthy, the credential-forwarding and supply-chain risk are disproportionate to the task.

Confidence: 94%Severity: 88%

Audit Metadata

Analyzed At

Jul 11, 2026, 04:17 AM

Package URL

pkg:socket/skills-sh/lwlee2608%2Flinear-cli%2Flinear%2F@c9835922d3d7c3ec6d384e465d00a0d9c9860e88a09247ee405e25cf92cf718e