Orchestra: Skill for Codex

.codex/skills/maestro-linear/SKILL.md

maestro-linear is a skill for Codex from Traves-Theberge/Orchestra. It costs 31 tokens per session (463 once invoked), scanned A, original, Apache-2.0.

A Linear task guide for Maestro, covering Linear teams and issues, workflow states, assignments, and links between issues and repository pull requests.

In plain words
What is it for?
Use it to validate the configured Linear connection, create or update issues, assign work, change states, and attach pull requests.
Why use it?
It prevents Linear workspace, team, issue, and local task identities from being mixed up, and requires returned data to be checked rather than assumed.

Skill for Codex

Written for Codex: installed under .codex/.

This is Traves-Theberge/Orchestra's own configuration. It tells Codex how to work on Orchestra itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything Orchestra configures →

Reuse

Borrowing it

Nothing to install: this file belongs to Traves-Theberge/Orchestra. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/Traves-Theberge/Orchestra/main/.codex/skills/maestro-linear/SKILL.md
Clone the repo
git clone --depth 1 https://github.com/Traves-Theberge/Orchestra

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for maestro-linear

README.md
[![agentmods](https://agentmods.dev/badge/skills/traves-theberge/orchestra/maestro-linear/github.svg)](https://agentmods.dev/skills/traves-theberge/orchestra/maestro-linear)
Your own site
<a href="https://agentmods.dev/skills/traves-theberge/orchestra/maestro-linear"><img src="https://agentmods.dev/badge/skills/traves-theberge/orchestra/maestro-linear/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for maestro-linear

Your own site · 80×15
<a href="https://agentmods.dev/skills/traves-theberge/orchestra/maestro-linear"><img src="https://agentmods.dev/badge/skills/traves-theberge/orchestra/maestro-linear.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 31 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 463 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00031 $0.00463
Opus 5.5 $0.00012 $0.00185
Sonnet 5.5 $0.00006 $0.00093
Haiku 4.5 $0.00003 $0.00046

Measured 19d ago against content hash c2f6193bcda0, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

maestro-linear scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 19d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.codex/skills/maestro-linear/SKILL.md · 19 lines

What it actually says

Linear for Maestro

Read maestro-integrations and orchestra-cli. Use the selected project's configured Linear connection; GitHub login does not authenticate Linear. Keep Linear workspace/team identity, issue UUID, display identifier, and issue URL separate from the Orchestra project/task IDs. Never send the linear: storage prefix as an API-native issue UUID.

The adapter reads a configured team key from connection metadata (legacy configurations may store it in endpoint) and maps workflow state types. Creation resolves that key to exactly one team UUID. Returned issues must confirm the native team before the registry binds the local Orchestra project. Do not assume a human team key is a UUID. Examine authenticated results and GraphQL errors even with HTTP 200.

Creation, assignment, state transitions, and PR attachment are distinct operations. Creation can send native assignee, workflow-state and priority values, but provider/runtime metadata is not established by a hosted issue response. Inspect the returned task and receipt rather than assuming every requested field was applied. If shared control reports unknown creation or missing scope, inspect that same team's inventory before retrying. Never create a duplicate in SQLite to hide a Linear failure. Reads currently return a bounded first page; do not claim a complete team inventory.

Use only advertised shared controls for task mutations. Guarded hosted queue/assignment support must be established by the executable and adapter; a generic Linear update method is not atomic admission. Preserve the user's existing authorization, but do not invent an unavailable command.

A Linear issue URL is not a PR link. Read the task's exact persisted PR linkage and use the matching repository provider skill to inspect the linked PR. Missing PR linkage is unknown/absent; mentioning an issue identifier in a branch is not linkage verification. Review and Done reconciliation remain separate from provider workflow-state mapping.

Connection setup belongs in Orchestra's tracker settings using the existing account/token mechanism; do not put keys in skills or global provider config. Linear's API guidance distinguishes personal keys from OAuth and requires checking GraphQL errors and team IDs. No configured connection means access is not established.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 19d ago First seen · 19 lines · 31 tokens per session scan A c2f6193bcda0

Subscribe to this mod's changes

maestro-linear is a skill published in the GitHub repository Traves-Theberge/Orchestra (26 stars, last pushed 10d ago), licensed Apache-2.0. It adds 31 tokens to every session and 463 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-06.