linkedin-post-research
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/search_posts.pyuses the Python standard library'surllib.requestmodule to perform HTTP POST requests to legitimate API endpoints (api.crustdata.comandapp.gooseworks.ai). This network activity is documented and necessary for the skill's primary function of researching LinkedIn content. - [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were detected. The skill transmits user-provided search keywords and authentication tokens (retrieved from environment variables) only to the specified service endpoints. It does not attempt to access sensitive local files or transmit user data to unknown third-party domains.
- [CREDENTIALS_UNSAFE]: The skill demonstrates safe credential management by instructing users to provide API keys via environment variables (
GOOSEWORKS_API_KEY,CRUSTDATA_API_TOKEN) rather than hardcoding them in the script or documentation.
Audit Metadata