linkedin-profile-post-scraper
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it ingests untrusted data from LinkedIn posts.\n
- Ingestion points: LinkedIn post content is retrieved via the Apify API in
scripts/scrape_linkedin_posts.py.\n - Boundary markers: The script outputs raw post text and summaries without delimiters or instructions to the agent to treat the content as potentially untrusted data.\n
- Capability inventory: The skill uses the
requestslibrary inscripts/scrape_linkedin_posts.pyto communicate with the Apify API infrastructure.\n - Sanitization: The script performs no sanitization or escaping of the scraped text before presenting it to the agent.\n- [EXTERNAL_DOWNLOADS]: The skill interacts with the external Apify service to provide its core functionality.\n
- Fetches information from
api.apify.com, which is a well-known service for web automation.\n - Includes the
requestsPython package as a dependency.
Audit Metadata