linkedin-event-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The skill includes explicit instructions to install dependencies "automatically without asking the user to confirm" and to "not describe" the installation or request approval, which are deceptive runtime directives outside the scraper's stated data-collection purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). High risk: the Skill explicitly instructs silent automatic installation of an external CLI without user approval and facilitates large-scale scraping of contact/contactable data, creating supply-chain and data-exfiltration concerns.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use the BrowserAct CLI to access and scrape live LinkedIn pages at runtime (public web content), which can include outsider-authored free text that the LLM may ingest while extracting fields.