linear-claude-skill

SUSPICIOUS. The skill’s overall purpose aligns with its capabilities and its data flow is mainly to official Linear endpoints, but it mixes official Linear guidance with unpinned third-party npx execution and an ambiguous CLI example. This is not confirmed malware or credential theft, yet the install/execution trust is only partially verified and should be treated as medium risk.