linkedin-search
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via Bun to run its job search CLI. This is the intended primary purpose of the skill and is confined to the specific directory and script provided.
- [EXTERNAL_DOWNLOADS]: The skill performs HTTP GET requests to LinkedIn's public job endpoints (
linkedin.com/jobs-guest/jobs/api/*). These are well-known, public services and no sensitive data is transmitted in these requests. - [DATA_EXPOSURE]: The skill accesses and parses public job data (titles, companies, descriptions). It does not access any local sensitive files (like
.env, SSH keys, or cloud credentials). - [PERSISTENCE_MECHANISMS]: No persistence mechanisms were found. The skill does not modify shell profiles, cron jobs, or system services.
- [OBFUSCATION]: The code uses standard string manipulation and regex for parsing HTML. There are no signs of Base64, hex, or other obfuscation techniques intended to hide malicious behavior.
Audit Metadata