LinkedIn Inbox Manager

• Outcome: Review
• Latest audit: Jul 10, 2026 · 2:23 AM UTC
• Version: 0.1.0

Overview

This skill is purpose-aligned for LinkedIn inbox automation, but it needs review because it can inspect private messages, save screenshots, post message details to notifications, and send from a logged-in account through broad browser automation.

Install only if you are comfortable giving an agent Screen Recording and Accessibility control over a logged-in LinkedIn browser. Use a dedicated Chrome profile with other sensitive tabs closed, keep the notification channel private, review recipient and content before every send, avoid send all, and periodically delete /tmp LinkedIn screenshots and any memory logs containing message content.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The script automatically captures a screenshot of a LinkedIn conversation and writes it to /tmp, which can contain sensitive message content, personal data, or business communications. There is no explicit user consent, sensitivity warning, retention control, or protection on the saved artifact, making unintended local disclosure more likely.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The script captures LinkedIn inbox screenshots and OCR/annotation JSON to disk in a predictable temporary directory without any warning, consent check, retention control, or access restriction. Because inbox contents can include private messages and personal data, writing these artifacts to /tmp risks unintended disclosure to other local users, backup/sync processes, or later compromise of leftover files.

Ssd 3

Medium

• Confidence: 96% confidence
• Finding: The instruction to log everything in a daily memory file creates a real privacy and retention risk because LinkedIn inbox contents may include sensitive personal, professional, or confidential information. If those logs are stored broadly, synced, or exposed to other tools/agents, private message content and relationship metadata could be leaked beyond the original platform.

Context Leakage

High

• Category: Data Exfiltration

Content

peekaboo press return --app "Google Chrome"
sleep 3

# Capture the conversation
OUTPUT_PATH="/tmp/linkedin-conversation-$(date +%s).png"
peekaboo see \
    --app "Google Chrome" \

• Confidence: 97% confidence
• Finding: Capture the conversation

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.