by 下载技能包
最后更新
2026/3/15
安全扫描
OpenClaw
安全
high confidenceThis is a coherent Linear CLI wrapper that only needs your LINEAR_API_KEY and uses the Linear GraphQL API; the requested access and actions match the skill's stated purpose, with a few small hygiene issues to check before installing.
评估建议
What to check before installing:
- Review the full scripts/linear.sh file (the manifest view here was truncated) to ensure there is no unexpected behavior or hidden endpoints.
- Confirm curl and jq are present on the host (the script requires them) and update the skill metadata if needed.
- Verify the LINEAR_API_KEY you supply has the minimal scopes needed (use a limited-scope token) because the script sends that key in Authorization headers to api.linear.app.
- Be aware the script caches team d...详细分析 ▾
ℹ 用途与能力
The skill's name and description match its behavior: the script wraps the Linear GraphQL API and performs issue/project/team operations. Requested env var (LINEAR_API_KEY) is expected. Minor inconsistency: the registry metadata lists no required binaries, but the script requires curl and jq (and the SKILL.md examples reference gh for PR creation). Confirm curl/jq are available or update metadata.
ℹ 指令范围
SKILL.md instructs the agent to run the included bash script which performs only GraphQL requests to api.linear.app and local caching of team data in /tmp. The instructions do not request unrelated system files or external endpoints. Note: the skill listing in this evaluation shows the script output truncated — review the full scripts/linear.sh file before trusting it to ensure there is no unexpected code beyond the displayed portion.
✓ 安装机制
No install spec (instruction-only with an included script). Nothing is downloaded from third-party URLs or written during an install step. Risk is limited to the content of the provided script which will run when invoked.
ℹ 凭证需求
Only LINEAR_API_KEY is required by the skill (optional LINEAR_DEFAULT_TEAM and LINEAR_TEAMS_CACHE are referenced). That is proportionate to the described functionality. The script derives a cache filename from a checksum of the API key and stores cached team data under /tmp; this is local storage and not an exfiltration channel, but it does create files named from a checksum of your key. Ensure you only provide a key with minimal necessary scopes.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated or persistent platform privileges. It writes a teams cache to /tmp (scoped to the API key checksum) but does not modify other skills or system configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/15
- Initial release of the Linear skill for querying and managing Linear issues, projects, and team workflows. - Provides bash CLI commands for issue management, team/project browsing, and workflow automation. - Integrates GitHub branch naming for automated Linear issue tracking. - Supports standup summaries, issue creation, assignment, status, and priority updates. - Requires a Linear API key and (optionally) a default team for streamlined commands.
● 无害
安装命令
点击复制官方npx clawhub@latest install linear-1-0-0
镜像加速npx clawhub@latest install linear-1-0-0 --registry https://cn.longxiaskill.com