linkedin

SUSPICIOUS: the skill is internally coherent and uses an official same-vendor npm package, so it does not look overtly malicious. However, its core model routes LinkedIn activity and sensitive account data through a non-LinkedIn intermediary service and enables real-world posting/messaging actions, making it medium-high risk despite matching its stated purpose.