social

SUSPICIOUS: the skill’s capabilities broadly match its stated purpose, but it relies on a third-party intermediary CLI/service for all LinkedIn/X access, uses a pipe-to-shell installer, and enables high-impact account actions. This looks more like a coherent but high-trust vendor integration than outright malware; the main risks are supply-chain trust, credential forwarding to third-party code, and autonomous social actions if confirmations are bypassed.