Linear
Warn
Audited by Socket on Jun 26, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s core purpose aligns with its Linear-focused capabilities and official Linear endpoints, so it is not fundamentally incompatible with its stated function. However, it combines Bash access, local session-file reading, and credential forwarding into third-party executables (notably mcp-remote and varlock), which raises medium risk and trust concerns disproportionate to a narrow API integration.
Confidence: 86%Severity: 68%
Audit Metadata