linkedin-scraper-api
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
scavioPython package (version 0.15.0). This is a vendor-owned package designed to facilitate interaction with the Scavio LinkedIn API and is a standard functional dependency. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from LinkedIn profiles, posts, and comments. This data is provided by an external source and represents a theoretical attack surface where malicious instructions could be embedded in social media content. However, this is an inherent aspect of scraping functionality and the skill lacks dangerous capabilities that would enable high-severity exploits.
Audit Metadata