linear

The skill's functionality broadly matches its stated Linear-management purpose, and the CLI install path appears to be official and same-vendor. The main risk is architectural: it routes authentication, data access, and generated actions through Membrane as an intermediary instead of using Linear's official API directly. That makes this coherent but moderately risky and better classified as suspicious-by-design rather than malicious.