linear-deploy-integration
Facilitates deployment of Linear-integrated applications and tracks deployments across various platforms like Vercel and Google Cloud.
Install this skill
Security score
The linear-deploy-integration skill was audited on Feb 28, 2026 and we found 23 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 130 | body: `## Deployed to ${info.environment} |
Template literal with variable interpolation in command context
| 133 | **Commit:** \`${info.commitSha.slice(0, 7)}\` |
Template literal with variable interpolation in command context
| 149 | console.log(`Updated ${identifier}`); |
Template literal with variable interpolation in command context
| 151 | console.error(`Failed to update ${identifier}:`, error); |
Template literal with variable interpolation in command context
| 167 | ```yaml |
Template literal with variable interpolation in command context
| 239 | body: `## Production Rollback |
Webhook reference - potential data exfiltration
| 34 | vercel env add LINEAR_WEBHOOK_SECRET production |
Webhook reference - potential data exfiltration
| 45 | "LINEAR_WEBHOOK_SECRET": "@linear-webhook-secret" |
Webhook reference - potential data exfiltration
| 48 | "api/webhooks/linear.ts": { |
Webhook reference - potential data exfiltration
| 65 | --set-secrets="LINEAR_API_KEY=linear-api-key:latest,LINEAR_WEBHOOK_SECRET=linear-webhook-secret:latest" \ |
Webhook reference - potential data exfiltration
| 99 | railway variables set LINEAR_WEBHOOK_SECRET=secret |
Webhook reference - potential data exfiltration
| 255 | [ ] Webhook endpoint accessible from internet |
Webhook reference - potential data exfiltration
| 265 | | `Webhook timeout` | Long processing | Increase function timeout | |
Webhook reference - potential data exfiltration
| 274 | Set up webhooks with `linear-webhooks-events`. |
Access to .env file
| 120 | apiKey: process.env.LINEAR_API_KEY!, |
Access to .env file
| 159 | version: process.env.VERSION!, |
Access to .env file
| 160 | commitSha: process.env.COMMIT_SHA!, |
Access to .env file
| 161 | deployUrl: process.env.DEPLOY_URL!, |
Access to .env file
| 162 | issueIdentifiers: process.env.ISSUE_IDS!.split(","), |
Access to .env file
| 220 | apiKey: process.env.LINEAR_API_KEY!, |
External URL reference
| 269 | - [Vercel Environment Variables](https://vercel.com/docs/environment-variables) |
External URL reference
| 270 | - [Cloud Run Secrets](https://cloud.google.com/run/docs/configuring/secrets) |
External URL reference
| 271 | - [Linear Deployment Tracking](https://linear.app/docs/git-integrations) |