linkedin-reply-handler
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external content from LinkedIn comments, which presents a surface for instructions embedded in those comments to influence agent behavior.
- Ingestion points: Data is fetched via
lib.ApifyClient.fetch_post_commentsandlib.url_parser.parse_linkedin_urlas documented inSKILL.md. - Boundary markers: The skill contains a dedicated 'Untrusted content' section in
SKILL.mdthat explicitly instructs the agent to treat fetched text as data and never as instructions. - Capability inventory: The skill has the ability to post reactions and replies to LinkedIn via
lib.publish. - Sanitization: The skill employs a stylistic 'humanizer' pass (
linkedin-humanizer), but relies primarily on instructional guardrails to handle adversarial input. - [COMMAND_EXECUTION]: The skill invokes
linkedin-humanizerto refine the voice of the generated drafts. This is a standard component of the author's social media toolset. - [EXTERNAL_DOWNLOADS]: The skill retrieves data from LinkedIn using the Apify platform, an established external service.
Audit Metadata