linkedin-comment-generator
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill instructions direct the agent to access user-specific context files at
.liftli/voice.mdand~/.liftli/voice.mdto personalize the generated content. These files are used to store user voice and style preferences. - [COMMAND_EXECUTION]: The skill provides instructions for users to manually run commands such as
npx skills add liftli-ai/linkedin-agent-skillsandclaude mcp addto install additional vendor tools. These commands target resources within the author's ecosystem. - [EXTERNAL_DOWNLOADS]: The skill references external resources hosted on
liftli.aiandmcp.liftli.aifor tool configuration and documentation. These resources are provided by the verified author of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection because it ingests untrusted data (LinkedIn posts) provided by the user to generate replies. However, the skill lacks autonomous execution capabilities that would allow such injections to perform sensitive operations.
Audit Metadata