github analyzed 378458a

cpropster/linear-mcp-server

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 378458a · analyzer v18 · 8h ago

credential in logscredential in logcpropster-linear-mcp-server-378458a/scripts/get-test-tokens.ts:34console.log(`LINEAR_ACCESS_TOKEN=${process.env.LINEAR_ACCESS_TOKEN}`);

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

net cpropster-linear-mcp-server-378458a/src/auth.ts :90 const response = await fetch(`${LinearAuth.OAUTH_TOKEN_URL}/oauth/token`, {

secrets cpropster-linear-mcp-server-378458a/scripts/get-test-tokens.ts :11 if (process.env.LINEAR_ACCESS_TOKEN) {
secrets cpropster-linear-mcp-server-378458a/src/index.ts :14 accessToken: process.env.LINEAR_REFRESH_TOKEN || process.env.LINEAR_ACCESS_TOKEN