linkedin

SUSPICIOUS: the stated purpose matches LinkedIn automation, and the npm install path looks coherent, but the core data flow is a third-party gateway that stores provider tokens and mediates all LinkedIn actions. Combined with public posting capabilities, this creates a meaningful security and trust risk disproportionate to a simple LinkedIn skill.