linkedin-profile-post-scraper
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a Python script to orchestrate scraping tasks via the Apify API.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the standard
requestsPython library to handle API communication. - [DATA_EXFILTRATION]: The script communicates with
app.gooseworks.ai(the author's domain) to proxy requests to Apify. This is a functional requirement for the skill's operation and involves expected vendor infrastructure. - [CREDENTIALS_UNSAFE]: The skill correctly manages sensitive information by requiring the
GOOSEWORKS_API_KEYto be provided via environment variables rather than hardcoding credentials. - [SAFE]: The skill processes external data (LinkedIn posts) which represents a standard indirect prompt injection surface; however, no evidence of exploitation or malicious instruction was found in the static analysis.
Audit Metadata