linkedin

SUSPICIOUS: the skill is internally coherent and uses a same-org official npm CLI, so it does not look malicious. However, it routes sensitive LinkedIn data and all actions through a third-party cloud browser service and enables high-impact external actions, making it medium risk and appropriate only with explicit user approval per write.