linkedin-enrichment
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute local Python scripts (
scripts/cli.py) to interact with the Apify API and manage the local cache database. - [EXTERNAL_DOWNLOADS]: The skill connects to Apify's official API endpoints (
api.apify.com) to retrieve LinkedIn data. This is a well-known service and the primary purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: As the skill ingests and processes untrusted data from external LinkedIn profiles and posts, it is theoretically susceptible to indirect prompt injection.
- Ingestion points:
scripts/apify_client.pyretrieves data from the Apify REST API. - Boundary markers:
SKILL.mdcontains explicit instructions to limit the amount of data passed back to the agent transcript and to avoid wholesale profile dumps. - Capability inventory: The skill has the ability to read/write to a local SQLite database and make network requests to a specific API.
- Sanitization:
scripts/extract.pyprovides field extraction and summarization, converting raw API responses into structured JSON results. - [CREDENTIALS_SAFE]: The skill strictly manages the Apify API token using the
APIFY_API_TOKENenvironment variable and includes logic inscripts/apify_client.pyto redact the token from error messages and logs.
Audit Metadata