Query and manage Linear issues, projects, cycles, and teams via the Linear GraphQL API. Use when you need to list or create issues, check cycle status, manag...
Security Analysis
medium confidenceThe skill's code, instructions, and required environment variable (LINEAR_API_KEY) are consistent with a Linear GraphQL client that calls api.linear.app directly and do not request unrelated credentials or installs.
Name/description match the actual behavior: the script is a Python CLI that queries and mutates Linear via https://api.linear.app/graphql. Required binary (python3) and required env var (LINEAR_API_KEY) are appropriate and proportionate.
SKILL.md instructs running the included Python script and setting LINEAR_API_KEY. The runtime instructions only reference the Linear API endpoint and the skill's own script path; there are no instructions to read unrelated files or exfiltrate data to external endpoints.
No install spec is present (instruction-only with an included script). The script uses only Python stdlib (urllib) and does not pull external packages or execute downloads during install.
Only LINEAR_API_KEY is required and declared as primaryEnv; this is exactly the credential needed to call the Linear API. There are no unrelated secrets or config paths requested.
always is false and the skill does not request persistent system-wide changes. It does not modify other skills' config or request elevated privileges; autonomous invocation is allowed by platform default and is not by itself a concern here.
Guidance
The skill appears internally consistent: it is a simple Python client that sends your LINEAR_API_KEY to api.linear.app/graphql and nothing else. Before installing, confirm you trust the skill source (the registry metadata lists no homepage and source is unknown). Use a Linear API key with minimal scope, rotate/revoke the key if you stop using the skill, and consider reviewing the full scripts/linear_query.py file yourself (or run it in a sandbox) to verify there are no hidden network calls or local file accesses beyond what is shown.
Latest Release
v1.0.1
Update display name to Native Linear
More by @codeninja23
Published by @codeninja23 on ClawHub
