linearb

SUSPICIOUS: the skill's purpose and capabilities are mostly aligned, and the CLI comes from an official registry, but all authentication and LinearB traffic are funneled through Membrane as an intermediary. That third-party credential and data routing is disproportionate versus direct official API use and creates medium risk, though there is no clear evidence of malware or hidden behavior.