linkedin-engagement-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Python scripts (
scrape_engagers.pyandfilter_icp.py) to perform its primary functions. These scripts are part of the skill's own code and do not involve arbitrary shell execution of untrusted input. - [EXTERNAL_DOWNLOADS]: The skill downloads scraping results from PhantomBuster's official S3 storage (
https://phantombuster.s3.amazonaws.com/). This is a legitimate functional requirement for retrieving results from the configured automation service. - [CREDENTIALS_SAFE]: Sensitive credentials like
PHANTOMBUSTER_API_KEYare managed using.envfiles via thepython-dotenvpackage, which is a standard security best practice for local tools. - [DATA_EXFILTRATION]: While the skill accesses LinkedIn engagement data, it does so through the user's own PhantomBuster account. Data is processed locally and exported to CSV/JSON files in the
output/directory for the user's own use (Lemlist import), with no evidence of unauthorized external transmission.
Audit Metadata