linkedin-profile-post-scraper
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Python script (
scripts/scrape_linkedin_posts.py) to orchestrate the scraping process and provide filtering functionality.- [EXTERNAL_DOWNLOADS]: The skill documentation recommends installing therequestslibrary, which is a standard and well-known package for HTTP communication.- [DATA_EXFILTRATION]: The script communicates withapi.apify.com, a well-known scraping service, transmitting the user's API token and target profile URLs as required for the tool's operation.- [PROMPT_INJECTION]: The skill processes untrusted content from LinkedIn profiles which creates a surface for indirect prompt injection. - Ingestion points: The
run_apify_actorandfetch_dataset_itemsfunctions inscripts/scrape_linkedin_posts.pyingest data from external web sources. - Boundary markers: Absent; there are no delimiters used to separate scraped content from instructions.
- Capability inventory: The script uses the
requestslibrary for network communication. - Sanitization: Absent; the scraped content is processed and printed without sanitization or instruction filtering.
Audit Metadata