Native Linear

v1.0.1

Query and manage Linear issues, projects, cycles, and teams via the Linear GraphQL API. Use when you need to list or create issues, check cycle status, manag...

16· 515·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description match the actual behavior: the script is a Python CLI that queries and mutates Linear via https://api.linear.app/graphql. Required binary (python3) and required env var (LINEAR_API_KEY) are appropriate and proportionate.
Instruction Scope
SKILL.md instructs running the included Python script and setting LINEAR_API_KEY. The runtime instructions only reference the Linear API endpoint and the skill's own script path; there are no instructions to read unrelated files or exfiltrate data to external endpoints.
Install Mechanism
No install spec is present (instruction-only with an included script). The script uses only Python stdlib (urllib) and does not pull external packages or execute downloads during install.
Credentials
Only LINEAR_API_KEY is required and declared as primaryEnv; this is exactly the credential needed to call the Linear API. There are no unrelated secrets or config paths requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes. It does not modify other skills' config or request elevated privileges; autonomous invocation is allowed by platform default and is not by itself a concern here.
Assessment
The skill appears internally consistent: it is a simple Python client that sends your LINEAR_API_KEY to api.linear.app/graphql and nothing else. Before installing, confirm you trust the skill source (the registry metadata lists no homepage and source is unknown). Use a Linear API key with minimal scope, rotate/revoke the key if you stop using the skill, and consider reviewing the full scripts/linear_query.py file yourself (or run it in a sandbox) to verify there are no hidden network calls or local file accesses beyond what is shown.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cgwmay1sz9ty0nrztnqnwr581r314

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Binspython3
EnvLINEAR_API_KEY
Primary envLINEAR_API_KEY

Comments