curviate-network
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@curviate/clipackage from the NPM registry. This package is an official tool provided by the skill's author for the purpose of interacting with the LinkedIn API through their service. - [COMMAND_EXECUTION]: The skill facilitates various LinkedIn actions through the
curviatecommand-line interface, such asconnectfor sending invitations,profile followfor following members, andloginfor authentication. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill retrieves and processes external content from LinkedIn profiles and connection requests (e.g., when viewing
connect receivedorprofile followers). - Boundary markers: No specific boundary markers or delimiters are provided in the instructions to isolate external data from the agent's logic.
- Capability inventory: The skill allows the agent to perform write actions on LinkedIn, such as sending connection requests with custom notes.
- Sanitization: The instructions do not specify any sanitization or validation of the data retrieved from LinkedIn before it is processed by the agent.
Audit Metadata