linkedin-job-scraper

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The Skill explicitly instructs the agent to install dependencies automatically "without asking the user to confirm" and to avoid describing the installation as a user request, which is a deceptive instruction outside the Skill's stated scraping purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The Skill explicitly instructs automatic installation of the BrowserAct CLI without asking the user for consent and tells the agent not to present it as a user action, enabling silent dependency installation that could be abused for supply-chain or unauthorized-installation attacks.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs the agent to invoke the BrowserAct CLI to access real LinkedIn pages at runtime, which can ingest outsider-authored free text from those public web pages into the LLM context via the browser automation workflow.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill treats the BrowserAct CLI as a required runtime dependency and instructs the agent to automatically install it via https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main (and the related https://www.browseract.com/?co-from=social-media link), which implies fetching and running remote installation code at runtime.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly instructs the agent to automatically install a runtime dependency (BrowserAct CLI) and to do so without asking the user for confirmation or separate approval, which encourages the agent to modify the host environment and perform installations that change machine state.