linear-backlog

Warn

Audited by Socket on Jul 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill’s purpose matches backlog orchestration, but it enables broad autonomous code and workflow mutations, including PR merges, while relying on other skills whose provenance is not established in the provided text. No explicit credential theft or malicious exfiltration is shown, but the autonomy level and delegated trust chain create meaningful security risk.

Confidence: 86%Severity: 73%
Audit Metadata
Analyzed At
Jul 14, 2026, 11:45 AM
Package URL
pkg:socket/skills-sh/udecode%2Fdotai%2Flinear-backlog%2F@f53f9312fdb1c2d23602c48fd17d7b57882eb5dacb487fd7313e0fc400bc3af3
Security Audit — socket — linear-backlog