linkedin-scraper

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly embeds proxy credentials and placeholders for usernames/passwords into configuration and example code (e.g., proxy URLs with username:password and "Enter credentials" for login), which requires the agent to handle and output secret values verbatim — an exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly scrapes and ingests content from public LinkedIn pages (e.g., https://linkedin.com/in/{username}/, company and job listing URLs) so the agent will fetch and interpret untrusted, user-generated third‑party content as part of its workflow (SKILL.md scraping steps), which could allow indirect prompt-injection via profile/job text.