linear

Warn

Audited by Socket on Apr 25, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's overall purpose matches Linear project management, and its main network flow is to Linear's official API. However, it depends on an unaffiliated third-party CLI, forwards the user's API token into that CLI, uses an unpinned global install, and contains inconsistent authentication guidance. This is not clearly malicious, but the install trust and credential-forwarding footprint are higher-risk than a tightly scoped official integration.

Confidence: 86%Severity: 62%
Audit Metadata
Analyzed At
Apr 25, 2026, 05:02 AM
Package URL
pkg:socket/skills-sh/nodnarbnitram%2Fclaude-code-extensions%2Flinear%2F@4b2c9b9f0d6439f27e25a90d43171572eabc17fa
Security Audit — socket — linear