use-linear-cli

SUSPICIOUS. The skill's functionality matches its stated Linear-automation purpose, but its trust model is weak: it pushes the agent to use a non-official personal CLI and forward Linear credentials to it, while granting broad mutating capabilities. No clear malware or covert exfiltration is shown, but the capability and credential scope are disproportionate versus using Linear's official MCP/API path.