recoup-internal-consulting-linkedin-engage

SUSPICIOUS. The skill’s purpose and capabilities are mostly aligned and the no-auto-post guardrails are strong, but outbound LinkedIn discovery appears to rely on unpinned third-party Apify actor code behind a local script. That creates medium supply-chain and credential/data-routing risk even though there is no clear evidence of malicious intent or overt exfiltration in the skill text itself.