linkedin-content

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a local utility script scripts/verify.sh and instructions to run npx @ericrisco/rsc copy check <file>.
  • The shell script performs read-only static analysis on text files using standard tools (awk, grep, wc) to check for character counts and specific keywords.
  • The npx command is a standard Node.js package execution for a brand-specific linter owned by the skill author ('ericrisco'), which is consistent with the skill's purpose of enforcing brand guidelines.
  • [REMOTE_CODE_EXECUTION]: The skill mentions the use of npx for a specific linter. This is a common developer workflow and, in this context, targets a tool attributed to the skill's vendor infrastructure. No arbitrary or untrusted remote code execution patterns (like curl | bash) were detected.
  • [EXTERNAL_DOWNLOADS]: The skill references several external URLs in SKILL.md (e.g., LinkedIn Engineering blog, dataslayer.ai, meet-lea.com).
  • These are provided as informational sources and citations for the engagement metrics discussed in the instructions.
  • All sources are reputable industry blogs or official engineering documentation.
  • [DATA_EXPOSURE]: The skill contains no commands or instructions that access sensitive system files, environment variables, or credentials. It operates entirely on user-provided text drafts for LinkedIn posts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 11:19 PM