📦 Linear Autopilot — 任务自动化
v1.0.2将 Linear 任务与 Discord 通知及 Git 同步打通，实现看板任务自动触发智能体，打造高效 Kanban-Agent 工作流。
0· 1.9k·0 当前·0 累计
by @vincentchan下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
high confidenceThe skill's purpose (Linear → Discord → git automation) is plausible, but the runtime instructions and included script require credentials and binaries that the registry metadata does not declare and give the agent/skill broader scope than advertised.
评估建议
This skill appears to implement the advertised Linear → Discord → git workflow, but there are important mismatches and privacy considerations you should address before installing:
- Metadata vs instructions: The registry declares no required env vars or binaries, but SKILL.md and scripts require a LINEAR_API_KEY and expect curl, jq, and git. Treat the script as requiring these tools and the API key even though the registry omits them.
- Secrets handling: The instructions ask you to store your ...详细分析 ▾
⚠ 用途与能力
The skill claims to automate Linear tasks with Discord notifications and git sync, which matches the provided scripts and guides. However, the registry metadata declares no required environment variables or binaries, while the SKILL.md and scripts require a LINEAR_API_KEY, and expect tools such as curl, jq and git. This mismatch is incoherent: a Linear integration legitimately needs an API key and network tools, so those should be declared.
⚠ 指令范围
The SKILL.md instructs creating ~/.clawdbot/linear.env and ~/.clawdbot/linear-config.json and to place API keys and Discord/Clawdbot tokens into automation services. It also tells the agent to 'spawn sub-agent if complex' and to run git commit/push. Those steps go beyond merely translating events and include file writes, network calls, and autonomous sub-agent spawning — all of which widen the operational scope and require explicit declaration and user attention.
ℹ 安装机制
There is no install spec (instruction-only), which is lower risk. The repo includes a shell script that will be run by the user. No remote downloads or extraction are present. Still, the script depends on curl, jq and git being available and will read/write files in the user's home directory; these runtime expectations should be documented in metadata.
⚠ 凭证需求
The registry lists no required env vars, but SKILL.md and scripts require LINEAR_API_KEY and the guides instruct using Clawdbot/Discord bot tokens in automation platforms. Those credentials are necessary for the functionality, so omitting them from declared requirements is an inconsistency. The skill asks users to store secrets in a plaintext file (~/.clawdbot/linear.env) without recommending permissions or limited-scope keys.
✓ 持久化与权限
The skill is not always: true and does not request elevated platform privileges. It writes/reads its own config under ~/.clawdbot and references clawdbot.json (Clawdbot config), which is reasonable for this integration, but users should be aware the skill will create files in their home directory.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/1/28
v1.0.2: Added security disclaimer explaining why the skill mentions API keys and credentials (required for integration setup tutorial)
● 可疑
安装命令
点击复制官方npx clawhub@latest install linear-autopilot
镜像加速npx clawhub@latest install linear-autopilot --registry https://cn.longxiaskill.com