linkedin-article-scraper

SUSPICIOUS: the skill is not clearly malicious, but its actual footprint is broader than simple article scraping and it instructs the agent to silently install a separate skill and external CLI. Same-org install evidence lowers pure supply-chain concern, yet the transitive skill dependency, autonomous installation, and third-party browser runtime make the overall risk medium-high.