linear

SUSPICIOUS: the skill’s purpose, permissions model, and same-org Linear OAuth/MCP flow are broadly coherent, and it avoids requesting secrets in chat. However, it critically depends on an installed `linear` CLI whose official provenance was not verifiable from public Linear documentation; because that binary handles authentication state and performs API actions, the skill carries high supply-chain and credential-forwarding risk until the CLI is independently confirmed as official and verifiable.