find-linkedin-url

SUSPICIOUS: the core LinkedIn-resolution workflow is broadly coherent and uses an official same-org CLI from npm, but the skill includes extra behaviors beyond its core purpose: telemetry/session attribution, transitive installation of another skill pack, and an optional GitHub starring action. No clear credential theft or malicious exfiltration is present, but the broadened trust footprint and real-world account action make it higher risk than a narrowly scoped enrichment skill.