linear-backlog
Warn
Audited by Socket on Jul 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill’s purpose matches backlog orchestration, but it enables broad autonomous code and workflow mutations, including PR merges, while relying on other skills whose provenance is not established in the provided text. No explicit credential theft or malicious exfiltration is shown, but the autonomy level and delegated trust chain create meaningful security risk.
Confidence: 86%Severity: 73%
Audit Metadata