Native Linear

• Analyzed: May 11, 2026, 4:34 AM
• Findings: 1
• Version: 1.0.1
• Hash: 37913acd78bfb5b60ddd1d39b3590e1a82c42d74022602662598ebd1eb446181
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill 'native-linear' is designed to interact with the Linear GraphQL API. The `scripts/linear_query.py` script correctly uses the `LINEAR_API_KEY` environment variable for authentication and communicates exclusively with the legitimate `https://api.linear.app/graphql` endpoint. Input arguments are handled via `argparse` and passed as variables to GraphQL queries, which mitigates common injection vulnerabilities. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts in `SKILL.md` or `README.md`. The code adheres to its stated purpose and uses standard Python libraries without suspicious external dependencies.