Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add emanuelcasco/pi-mono-extensions --skill lineargit clone --depth 1 https://github.com/emanuelcasco/pi-mono-extensionsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/emanuelcasco/pi-mono-extensions/linear)<a href="https://agentmods.dev/skills/emanuelcasco/pi-mono-extensions/linear"><img src="https://agentmods.dev/badge/skills/emanuelcasco/pi-mono-extensions/linear/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/emanuelcasco/pi-mono-extensions/linear"><img src="https://agentmods.dev/badge/skills/emanuelcasco/pi-mono-extensions/linear.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Rogue Agent · line 8 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Excessive Agency · line 12 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00042 | $0.01104 |
| Opus 5.5 | $0.00017 | $0.00442 |
| Sonnet 5.5 | $0.00008 | $0.00221 |
| Haiku 4.5 | $0.00004 | $0.00110 |
Grade A, and why
linear scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Linear Integration
Use the native linear_* tools to read and write Linear data through the Linear GraphQL API.
Critical Rules
- Never ask the user to paste a Linear API key in chat.
- Never expose the API key inline in shell commands.
- Before updating an issue or commenting, use
linear_get_issueto verify the target. - Before uploading a file to an issue comment, use
linear_get_issueto verify the target. - When IDs are unknown, use
linear_workspace_metadatafirst.
Authentication
The tools read the key from an in-memory override, LINEAR_API_KEY, or ~/.pi/agent/auth.json at .linear.key.
If auth is missing, invalid, or expired, do not ask the user to paste the key in chat. Use the native linear_configure_auth tool or ask the user to run /linear-auth --force. The prompt is masked and the key is stored by the extension without returning it to the model.
Tool Workflow
- Use
linear_configure_authonly when auth is missing, invalid, expired, or the user asks to update the key. - Use
linear_workspace_metadatafirst when team/project/state/label/user IDs are unknown. - Use
linear_search_issuesfor keyword lookup. - Use
linear_get_issuebefore updating or commenting. - Use
linear_get_issueto inspect Linear issues; Markdown images embedded in the issue description are automatically included when the active model supports image input. - If
linear_get_issuereports description images were skipped because the current model does not support images, ask the user to switch to a vision-capable model before interpreting screenshots. - Use
linear_list_issuesfor filtered issue lists by team, assignee, status, or limit. - Use
linear_create_issueto create issues once the team ID is known. - Use
linear_update_issueto change title, description, priority, state, or assignee. - Use
linear_create_commentto add Markdown context to an issue. - Use
linear_upload_fileto upload a local image, video, or generic file and get a Linear asset URL. - Use
linear_upload_file_to_issue_commentto upload a local file and comment on a verified issue in one step.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2mo ago First seen · 118 lines · 42 tokens per session scan A ee5a4feeaca5
linear is a skill published in the GitHub repository emanuelcasco/pi-mono-extensions (108 stars, last pushed 2mo ago), licensed MIT. It adds 42 tokens to every session and 1,104 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
using-pi-subagents
Operate pi-subagents jobs safely, including direct-work decisions, least-privilege tools and attachments, thinking levels, delegation, bidirectional messaging, parallel starts, timeouts, waiting, cancellation, result handling, verification, and writer isolation.
configure-pi-starship
Configure @narumitw/pi-starship and answer questions about its pi-starship.toml settings. Use when the user asks to create, edit, repair, migrate, or understand pi-starship.toml, or asks which pi-starship module, variable, option, style, palette, preset, or runtime behavior to use. Do not use for generic TOML, shell…
codebase-memory
Use the codebase knowledge graph for structural code queries. Triggers on: explore the codebase, understand the architecture, what functions exist, show me the structure, who calls this function, what does X call, trace the call chain, find callers of, show dependencies, impact analysis, dead code, unused functions…
typesafe-ai
Build AI-powered software with TypeSafe and Jev, or use pi-typesafe's typesafequestion tool for typed semantic judgments and probabilities. Use when a feature needs programmable common sense, when an LLM prompt-and-parse step could become a structured decision, or when designing, calling, evaluating, or…
configure-pi-sync
Explain @narumitw/pi-sync settings and guide safe setup through its existing manager. Use when the user asks how to configure pi-sync.json, choose Git, WebDAV, R2, or S3 storage, select synced content, understand automatic controls, or recover unsupported settings. This skill provides guidance only, not settings edits…
spec-flow
Use when planning, executing, checkpointing, finishing, or inspecting lightweight spec-driven work. Runs one task at a time using .spec/ markdown files and the bundled specctl helper. NOT for broad product discovery beyond a short requirement interview. NOT for generic implementation planning that does not read or…