Maverick Linear MCPorter

• Analyzed: May 3, 2026, 8:01 PM
• Findings: 1
• Version: 1.0.3
• Hash: 9fcd296b689db4c53bc35231f748d53d39b34aacc02c5b09fb412435d80d3e45
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate integration for Linear via the Model Context Protocol (MCP). It uses the 'mcporter' CLI to communicate with the official Linear MCP endpoint (https://mcp.linear.app/mcp). The included 'scripts/init-mcporter.sh' securely manages OAuth tokens by seeding them into the local mcporter vault (~/.mcporter/credentials.json), employing security best practices such as file locking (flock), atomic writes via mktemp, and passing secrets to jq through environment variables to avoid exposure in process lists. No malicious intent or unauthorized data exfiltration was detected.