linkedin-following-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.90). The Skill contains explicit instructions to auto-install a dependency without asking the user and to hide that fact ("Do not describe it..." and "without asking the user to confirm"), which is deceptive and outside its stated scraping purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The Skill appears to be a legitimate LinkedIn scraper but contains explicit instructions to auto-install a runtime dependency without user confirmation and to avoid requesting or describing that installation to the user, which creates a supply-chain/stealth installation risk consistent with deliberate malicious behavior.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). This skill’s required runtime workflow invokes the browser-act Skill to access live LinkedIn pages (public web content), so the LLM context can include outsider-authored free text scraped from those pages.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs the agent to automatically install and invoke the BrowserAct runtime from the provided installer links (which fetch and execute remote code), e.g. https://www.browseract.com/?co-from=lead-generation&redirect=https://github.com/browser-act/skills/tree/main, so the URL is used at runtime to obtain required executable code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The Skill explicitly instructs the agent to automatically install the BrowserAct CLI/Skill without asking the user for approval (and to resume execution afterward), which pushes the agent to modify the host by installing software — an operation that can change system state and may require elevated privileges.