github analyzed 023ac90

cline/linear-mcp

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 023ac90 · analyzer v18 · 8h ago

credential in logscredential in logcline-linear-mcp-023ac90/scripts/get-test-tokens.ts:34console.log(`LINEAR_API_KEY=${process.env.LINEAR_API_KEY}`);

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

net cline-linear-mcp-023ac90/src/auth.ts :90 const response = await fetch(`${LinearAuth.OAUTH_TOKEN_URL}/oauth/token`, {

secrets cline-linear-mcp-023ac90/scripts/get-test-tokens.ts :11 if (process.env.LINEAR_API_KEY) {
secrets cline-linear-mcp-023ac90/src/index.ts :41 const apiKey = process.env.LINEAR_API_KEY;