LinkedIn Post Engine

• Outcome: Pass
• Latest audit: May 28, 2026 at 7:29 AM UTC
• Version:
  1.0.3

Overview

This skill is a LinkedIn writing assistant made only of Markdown guidance, with no code, account access, credential use, persistence, or publishing authority.

Reasonable to install as a drafting aid. Review generated posts for factual accuracy, authenticity, and brand fit before publishing, especially because the skill is designed to improve engagement.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 89% confidence
• Finding: The skill description is broad enough to trigger on many ordinary writing-related requests, which can cause the agent to invoke this skill outside clearly intended LinkedIn-specific use cases. Overly broad invocation expands the skill’s reach and may override more appropriate skills or expose users to unintended prompt steering, even though the content itself is not overtly malicious.

VirusTotal

65/65 vendors flagged this skill as clean.