linkedin-content
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a local utility script
scripts/verify.shand instructions to runnpx @ericrisco/rsc copy check <file>. - The shell script performs read-only static analysis on text files using standard tools (
awk,grep,wc) to check for character counts and specific keywords. - The
npxcommand is a standard Node.js package execution for a brand-specific linter owned by the skill author ('ericrisco'), which is consistent with the skill's purpose of enforcing brand guidelines. - [REMOTE_CODE_EXECUTION]: The skill mentions the use of
npxfor a specific linter. This is a common developer workflow and, in this context, targets a tool attributed to the skill's vendor infrastructure. No arbitrary or untrusted remote code execution patterns (likecurl | bash) were detected. - [EXTERNAL_DOWNLOADS]: The skill references several external URLs in
SKILL.md(e.g., LinkedIn Engineering blog, dataslayer.ai, meet-lea.com). - These are provided as informational sources and citations for the engagement metrics discussed in the instructions.
- All sources are reputable industry blogs or official engineering documentation.
- [DATA_EXPOSURE]: The skill contains no commands or instructions that access sensitive system files, environment variables, or credentials. It operates entirely on user-provided text drafts for LinkedIn posts.
Audit Metadata