Linear CLI
v1.0.1Manage Linear issues, projects, teams, and documents from the command line using the linear CLI. Create, update, list, and track issues; manage projects and milestones; interact with the Linear GraphQL API.
⭐ 0· 982·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the requested artifacts: the skill is instruction-only and invokes the 'linear' CLI. Requiring the linear binary and providing Homebrew install is appropriate. Minor note: the docs mention integration with git/jj and using the 'gh' CLI for creating PRs, but those binaries are not declared in the skill's required binaries list — this is a documentation omission rather than evidence of malicious behavior.
Instruction Scope
SKILL.md tells the agent to run 'linear' commands and operate on repo-local config (.linear.toml, temp files) and to obtain a Linear API key via linear auth login. It also suggests using linear auth token in curl. The instructions do not direct reading unrelated system files or exfiltrating data to unexpected endpoints; operations that access local files (e.g., --content-file, schema output) are reasonable for the CLI's purpose.
Install Mechanism
Install uses a Homebrew formula (schpet/tap/linear). Homebrew is a normal install mechanism; however the tap is a third-party tap (schpet/tap) rather than an official core formula. This increases the need to verify the formula/release source but is not inherently malicious. No arbitrary archive downloads or extracts are specified in the skill metadata.
Credentials
The skill declares no required environment variables; the documentation lists optional LINEAR_* env vars used for config and instructs obtaining a Linear API key via the official Linear account settings and 'linear auth login'. Requested credentials are proportional to the task and limited to Linear API auth (no unrelated secrets are requested).
Persistence & Privilege
always:false and normal autonomous invocation settings are used. The skill does not request permanent platform-wide presence or modification of other skills' configs. It may create git branches and write per-repo config files via the CLI, which is expected for this tool.
Assessment
This skill appears to be what it claims (a wrapper around the 'linear' CLI). Before installing, verify the Homebrew tap/formula source (schpet/tap/linear) and the upstream project (e.g., the GitHub releases URL referenced) so you trust the binary you will install. Be aware: the CLI will use your Linear API token (you must create and provide it via 'linear auth login'), can create/switch git branches and (per docs) may invoke the 'gh' CLI when creating PRs — ensure you only run those features when you expect them and that 'gh' and git are present and trusted. The CLI can upload document content and attached files to Linear when you run document/attach commands, so avoid passing sensitive local files unless you intend to upload them. If you want higher assurance, inspect the Homebrew formula and the project's GitHub repo/release artifacts before installation.Like a lobster shell, security has layers — review code before you run it.
latestvk977fmwqyachjtn3pz3cgmhcjh80wbzz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖇️ Clawdis
OSmacOS · Linux · Windows
Binslinear
Install
Install linear CLI (brew)
Bins: linear
brew install schpet/tap/linear