Native Linear

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a straightforward Linear API integration that uses your Linear API key to query and create or update issues, with no evidence of hidden exfiltration or persistence.

This skill looks coherent for managing Linear from OpenClaw. Before installing, make sure you are comfortable giving it a Linear API key, use the least-privileged key available, and review any create or update action before letting an agent change important workspace issues.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If invoked, the skill can create or update Linear issues in the workspace associated with the API key.

Why it was flagged

The helper can perform Linear GraphQL mutations to create issues, matching the stated purpose but still changing third-party workspace data.

Skill content
mutation($input: IssueCreateInput!) { ... issueCreate(input: $input) ... }
Recommendation

Use it for intended issue changes only, and consider confirming create/update actions before running them in important workspaces.

What this means

The skill can access Linear data and perform allowed actions as the API key owner or scope permits.

Why it was flagged

The skill requires a Linear API key, which is expected for this integration but grants delegated access according to the key's permissions.

Skill content
requires:
  env:
    - LINEAR_API_KEY
Recommendation

Use a key with the minimum necessary permissions, rotate it if exposed, and avoid sharing outputs that contain sensitive issue details.

What this means

You have less independent context for who maintains the skill or where to audit its upstream source.

Why it was flagged

The package does not provide an external source or homepage for provenance verification, although no risky install mechanism is shown.

Skill content
Source: unknown
Homepage: none
Recommendation

Review the included files before use and install only if you trust the publisher and the required Linear API access.