linear-debug-bundle
Provides a comprehensive toolkit for debugging Linear API integrations, enhancing logging and tracing capabilities.
Install this skill
Security score
The linear-debug-bundle skill was audited on May 12, 2026 and we found 20 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 68 | console.log(`[Linear:DEBUG] >>> ${label}`); |
Template literal with variable interpolation in command context
| 73 | console.log(`[Linear:DEBUG] <<< ${label} (${ms}ms) OK`); |
Template literal with variable interpolation in command context
| 78 | console.error(`[Linear:DEBUG] !!! ${label} (${ms}ms) FAILED:`, error); |
Template literal with variable interpolation in command context
| 109 | const id = `trace-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`; |
Template literal with variable interpolation in command context
| 234 | envCheck.issues.forEach(i => console.error(` - ${i}`)); |
Template literal with variable interpolation in command context
| 253 | console.log(`${v.name} (${v.email})`); |
Template literal with variable interpolation in command context
| 258 | t.nodes.forEach(team => console.log(` ${team.key}: ${team.name}`)); |
Template literal with variable interpolation in command context
| 263 | i.nodes.forEach(issue => console.log(` ${issue.identifier}: ${issue.title}`)); |
Template literal with variable interpolation in command context
| 275 | console.error(`Error: ${e.message}`); |
Template literal with variable interpolation in command context
| 317 | console.log(`${label}: avg=${avg}ms, max=${max}ms (${runs} runs)`); |
Curl to non-GitHub URL
| 299 | curl -s -X POST https://api.linear.app/graphql \ |
Webhook reference - potential data exfiltration
| 218 | if (!process.env.LINEAR_WEBHOOK_SECRET) { |
Webhook reference - potential data exfiltration
| 219 | issues.push("WARNING: LINEAR_WEBHOOK_SECRET not set (webhooks won't verify)"); |
Access to .env file
| 85 | const client = new LinearClient({ apiKey: process.env.LINEAR_API_KEY! }); |
Access to .env file
| 208 | const apiKey = process.env.LINEAR_API_KEY; |
Access to .env file
| 218 | if (!process.env.LINEAR_WEBHOOK_SECRET) { |
Access to .env file
| 222 | if (process.env.NODE_ENV === "production" && apiKey?.includes("dev")) { |
External URL reference
| 299 | curl -s -X POST https://api.linear.app/graphql \ |
External URL reference
| 327 | - [Linear API Status](https://status.linear.app) |
External URL reference
| 328 | - [Node.js Performance Hooks](https://nodejs.org/api/perf_hooks.html) |