linkedin-cli

SUSPICIOUS. The skill is internally coherent for LinkedIn automation and uses same-org docs/domains plus an npm-distributed CLI, so it is not outright malicious. However, it grants an AI agent high-impact social actions and routes tokens, workflow data, and LinkedIn activity through a third-party cloud browser service rather than official LinkedIn APIs, making the overall risk medium-to-high despite reasonable purpose alignment.