linkedin-cli

SUSPICIOUS: the skill is internally consistent with LinkedIn automation, and the installer appears to be the vendor's official npm package, so this is not confirmed malware. However, it requires trusting a third-party automation service and CLI with tokens, LinkedIn data, and the ability to perform outbound account actions, creating meaningful security and autonomy risk.