linkedin

The package describes plausible LinkedIn automation features that work by either controlling an attached browser tab or by reusing a raw session cookie (li_at). The primary security concerns are: handling of raw session tokens (li_at) via copy/paste, lack of verified provenance for the browser relay extension (supply-chain/trust ambiguity), and reliance on manual confirmations rather than enforced technical controls. These factors create moderate-to-high credential and supply-chain risk even though the code is not overtly malicious. Recommend: do not paste li_at into untrusted agents, verify and audit any browser relay extension and its backend, prefer ephemeral/local-attached sessions, implement enforced per-action confirmations, and add secure storage/rotation guidance before using in production.