CodeQL, Semgrep and SARIF static-analysis toolkit from Trail of Bits: taint tracking, fast pattern scans and merged, deduplicated security findings for coding agents.
OpenAI linearSkill
Summary
OpenAI's skill for driving Linear through its MCP server: a read-first workflow for issue triage, sprint planning, documentation audits and workload balancing, with the MCP setup and OAuth steps written out.
Features
- Writes out the Linear MCP setup: remote server URL, remote MCP client flag, OAuth login and the required restart
- WSL fallback config for Windows connection errors
- Read-first execution order: list/get/search to build context before any create or update
- Explains the grouping logic before applying a bulk change
- Nine concrete plays, from sprint planning and bug triage to retrospectives and dependency discovery
- Troubleshooting for OAuth, missing required fields and Linear API rate limits
Install This Skill
Add this skill to your favorite AI agent in a few steps.
Skill Content
Usage Instructions
Learn how to use this skill with different AI agents.
Example Usage
Triage the open bugs on the Platform team in Linear: rank the critical and high ones by user impact, and move the top five to In Progress.
Description
Linear's MCP server gives an agent the tools; it does not tell the agent how to use them well. linear is OpenAI's curated skill that supplies the missing procedure — and, usefully, the setup steps people get stuck on.
It starts before the first tool call
Step 0 is the Linear MCP connection itself: add the remote server (https://mcp.linear.app/mcp), enable the remote MCP client, complete the OAuth login, and — the detail that saves an afternoon — restart the client afterwards, which the skill tells the user explicitly rather than looping on a failing call. There is a documented WSL fallback for Windows connection errors, routing through mcp-remote over SSE.
The workflow
After setup it enforces four ordered steps: clarify the goal and scope (team, project, priority, labels, cycle, due dates); choose the workflow and confirm the identifiers the tools will need; execute in logical batches — read first with list/get/search to build context, then create and update, explaining the grouping before any bulk change; and finally summarise results, remaining gaps and proposed next actions.
The read-before-write rule and the explain-before-bulk rule are the two that matter. Bulk operations on an issue tracker are hard to undo and easy to get subtly wrong, and narrating the grouping first gives you a chance to stop it.
What it covers
The skill maps the Linear MCP tool surface — issues (list_issues, get_issue, create_issue, update_issue, list_my_issues, statuses, labels), projects and teams (list_projects, create_project, update_project, list_teams, list_users), and documentation and collaboration (list_documents, search_documentation, list_comments, create_comment, list_cycles) — onto nine concrete plays: sprint planning, bug triage, documentation audit, workload balancing, release planning, cross-project dependency discovery, automated status updates, smart labelling and sprint retrospectives.
It closes with a troubleshooting section for the three things that actually go wrong: OAuth and workspace permissions, tool-calling errors from missing required fields, and Linear's API rate limits when a bulk operation runs too wide.
Who it is for
Engineering teams running Linear who want an agent to do the tracker housekeeping — triage, labelling, retro reports — without it quietly reorganising a board. From OpenAI's curated public skills collection.
Related Skills
Microsoft's official Playwright skill — drives a real browser from the command line using accessibility snapshots and element refs, and plans, generates and heals Playwright tests.
Google's official agent skill for writing production Maps Platform code — grounded in freshly fetched docs, with a demo key path that needs no billing account.
Railway's official agent skill: create projects, provision databases and buckets, deploy, manage variables and domains, and read build failures back — from the CLI, API or MCP server.