linkedin-scraper
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to extract configuration from local files and perform network operations.
- It utilizes
python3 -cto parse a configuration file located at~/.gooseworks/credentials.jsonto set environment variables. - It uses
curlto interact with the Orthogonal and Gooseworks APIs. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves data from external LinkedIn profiles, company pages, and posts, which could contain malicious instructions designed to manipulate the agent.
- Ingestion points: External data scraped from
linkedin.comvia the Scrape Creators API. - Boundary markers: None provided in the skill instructions to delimit untrusted data or instruct the agent to ignore embedded instructions.
- Capability inventory: The skill has the ability to execute shell commands (
curl) to perform further network requests. - Sanitization: No sanitization or validation of the retrieved LinkedIn content is mentioned.
Audit Metadata