curviate-network

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @curviate/cli package from the NPM registry. This package is an official tool provided by the skill's author for the purpose of interacting with the LinkedIn API through their service.
  • [COMMAND_EXECUTION]: The skill facilitates various LinkedIn actions through the curviate command-line interface, such as connect for sending invitations, profile follow for following members, and login for authentication.
  • [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: The skill retrieves and processes external content from LinkedIn profiles and connection requests (e.g., when viewing connect received or profile followers).
  • Boundary markers: No specific boundary markers or delimiters are provided in the instructions to isolate external data from the agent's logic.
  • Capability inventory: The skill allows the agent to perform write actions on LinkedIn, such as sending connection requests with custom notes.
  • Sanitization: The instructions do not specify any sanitization or validation of the data retrieved from LinkedIn before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 06:08 PM