linkedin

SUSPICIOUS: the skill is internally coherent and uses a same-org npm package, so it does not look like a disguised malware lure. However, it routes all LinkedIn activity, inbox content, and automation through a third-party cloud-browser service and empowers high-impact autonomous actions like messaging and posting, creating meaningful security and trust risk even though the behavior matches the stated purpose.