skills/zocomputer/skills/linkedin/Snyk

linkedin

Warn

Audited by Snyk on Apr 12, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and summarizes user-generated LinkedIn content (profiles, feed posts, and conversations) via scripts/lk.py (e.g., feed(), check_messages()) and SKILL.md's "lk feed" / "lk messages" commands, exposing the agent to untrusted third-party content that could contain actionable instructions.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Apr 12, 2026, 07:32 AM

Issues

1