📦 Linear CLI — Linear 命令行
v0.1.0Linear命令行工具，通过命令行管理Linear项目和任务。
0· 493·4 当前·4 累计
by 下载技能包
最后更新
2026/2/27
安全扫描
OpenClaw
可疑
high confidenceThe skill's description claims it provides wrapper scripts and config for a Linear CLI but the package contains no code files and the manifest metadata contradicts the runtime instructions (e.g., LINEAR_API_KEY), so the bundle is internally inconsistent and needs clarification before use.
评估建议
Do not install or run this skill until the author clarifies and provides the missing files. Specifically: (1) ask for the actual scripts (./scripts/linear) and a2c/config.xfer or a clear, auditable generator that will create them at install/run time; (2) confirm that LINEAR_API_KEY is required and update the registry metadata to declare it as a required credential; (3) if a generator will write files at runtime, get the generator source so you can review it — ensure it does not download or execu...详细分析 ▾
⚠ 用途与能力
The SKILL.md and README claim the skill provides a wrapper script (./scripts/linear) and an a2c workspace (a2c/config.xfer). However the published package only contains README.md and SKILL.md — no scripts or config files are present. That makes the claimed capability unsupported by the files included. Additionally, the registry metadata lists no required env vars, while SKILL.md explicitly requires LINEAR_API_KEY (mismatch). Requesting a Linear API key itself is proportional to the stated purpose, but the claim that the package 'provides' files is not backed by the archive.
⚠ 指令范围
Runtime instructions tell the agent/user to run ./scripts/linear and to rely on a2c/config.xfer. Those files are not present in the published files, and there are no instructions explaining how or when they will be generated. Apart from that mismatch, the instructions themselves are narrowly scoped to calling the Linear GraphQL API via a2c and only reference LINEAR_API_KEY — there are no broad data-collection or unrelated-system-read directives.
✓ 安装机制
There is no install spec (instruction-only skill), which is low-risk. The declared runtime dependency is a2c on PATH; that's reasonable and expected. No downloads or archive extraction are present in the package.
⚠ 凭证需求
SKILL.md requires a LINEAR_API_KEY environment variable, which is proportionate for a Linear CLI. However the registry metadata and manifest claim no required env vars and no primary credential — this inconsistency is a red flag. Confirming which env vars are truly required and why would be necessary. No other credentials are requested.
✓ 持久化与权限
The skill does not request elevated persistence: always is false and there are no config paths or system-wide changes requested. No automatic autonomous invocation privilege issues beyond the platform default.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.1.02026/2/27
Rename skill slug to avoid collision; generate a2c config at runtime.
● 无害
安装命令
点击复制官方npx clawhub@latest install linear-cli
镜像加速npx clawhub@latest install linear-cli --registry https://cn.longxiaskill.com