linkedin-profile-post-scraper

Pass

Audited by Gen Agent Trust Hub on Apr 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a Python script (scripts/scrape_linkedin_posts.py) to orchestrate the scraping process and provide filtering functionality.- [EXTERNAL_DOWNLOADS]: The skill documentation recommends installing the requests library, which is a standard and well-known package for HTTP communication.- [DATA_EXFILTRATION]: The script communicates with api.apify.com, a well-known scraping service, transmitting the user's API token and target profile URLs as required for the tool's operation.- [PROMPT_INJECTION]: The skill processes untrusted content from LinkedIn profiles which creates a surface for indirect prompt injection.
  • Ingestion points: The run_apify_actor and fetch_dataset_items functions in scripts/scrape_linkedin_posts.py ingest data from external web sources.
  • Boundary markers: Absent; there are no delimiters used to separate scraped content from instructions.
  • Capability inventory: The script uses the requests library for network communication.
  • Sanitization: Absent; the scraped content is processed and printed without sanitization or instruction filtering.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 12, 2026, 02:53 AM