playbook-linkedin-engagement

Fail

Audited by Snyk on Aug 23, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E006: Malicious code pattern detected in skill scripts.

  • Malicious code pattern detected (high risk: 0.90). This playbook explicitly instructs harvesting LinkedIn engagers, running email-finding and enrichment, and exporting those people as prospect rows (with automated pushes to client DNC lists) — a deliberate, targeted data-extraction workflow that enables non-consensual collection and downstream outreach of personal contact data.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

  • Third-party content exposure detected (low risk: 0.10). Exclusion: the required workflow ingests only operator-provided configuration (source URLs/domains, client domain, ICP) and scraped LinkedIn post/reaction/comment data that it windowed/shortlisted by engagement count, rather than ingesting arbitrary outsider-authored free text selected without first targeting specific LinkedIn posts/accounts.

Issues (2)

E006
CRITICAL

Malicious code pattern detected in skill scripts.

W011
MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 23, 2026, 02:36 PM
Issues
2
Security Audit — snyk — playbook-linkedin-engagement