linkedin-profile-scraper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly calls the Apify actor harvestapi~linkedin-profile-search (see SKILL.md and scripts/apify-linkedin-search.js) to fetch public LinkedIn profile data (user-generated, untrusted), parses fields like headline/about/email from the actor's dataset, and uses those values for deduplication, storage, and outreach-related decisions—meaning third-party content is read and can materially influence actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The script invokes an external Apify actor (harvestapi~linkedin-profile-search, actor ID M2FMdjRVeF1HPGFcc) via the Apify API at runtime (ApifyClient.client.actor(...).call), which executes remote scraping code that the skill depends on, so it is an external runtime dependency that runs remote code.