Linear

Warn

Audited by Socket on Jun 26, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s core purpose aligns with its Linear-focused capabilities and official Linear endpoints, so it is not fundamentally incompatible with its stated function. However, it combines Bash access, local session-file reading, and credential forwarding into third-party executables (notably mcp-remote and varlock), which raises medium risk and trust concerns disproportionate to a narrow API integration.

Confidence: 86%Severity: 68%
Audit Metadata
Analyzed At
Jun 26, 2026, 07:00 AM
Package URL
pkg:socket/skills-sh/wrsmith108%2Flinear-claude-skill%2Flinear%2F@563450dda895962f505120fee85226cc857800b7
Security Audit — socket — Linear