linkedin-scraper
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python one-liners during setup to extract the API key and base URL from a local configuration file at
~/.gooseworks/credentials.json. This is a standard utility pattern for environment configuration. - [EXTERNAL_DOWNLOADS]: Refers to the
npx gooseworks logincommand for user authentication, which utilizes the official Gooseworks CLI tool. - [SAFE]: The skill reads from
~/.gooseworks/credentials.jsonto manage its own authentication. This is an appropriate method for secret management and does not represent unsafe data exposure. - [SAFE]: As a scraping tool, the skill ingests external data from LinkedIn. While this presents an indirect prompt injection surface, the skill does not possess sensitive capabilities (such as arbitrary file writes or remote code execution) that would allow for exploitation of the agent context.
Audit Metadata