linkedin-message-agent

Warn

Audited by Socket on Apr 8, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's core behavior matches its stated purpose, but it grants an AI agent high-impact autonomy over LinkedIn communications, relies on raw session cookies, and exports private conversations to a database. The main concern is not hidden malware but disproportionate trust and data-handling risk for automated social messaging.

Confidence: 88%Severity: 78%
Audit Metadata
Analyzed At
Apr 8, 2026, 08:21 AM
Package URL
pkg:socket/skills-sh/kevinbadi%2Fai-os-skills%2Flinkedin-message-agent%2F@f8c90c3ed920177b26058cd18587e06142b9088a
Security Audit — socket — linkedin-message-agent