Linkedin API
v1.0.0Work with LinkdAPI Python SDK for accessing LinkedIn professional profile and company data. Use when you need to fetch profile information, company data, job listings, or search for people/jobs on LinkedIn. The skill uses uv script pattern for ephemeral Python scripts with inline dependencies.
⭐ 4· 2k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md describes a LinkdAPI Python SDK for LinkedIn data (profiles, companies, jobs) which is coherent with the skill name and description. However the registry metadata lists no homepage/source and no required env vars, despite the instructions clearly requiring an API key and using an external service (linkdapi.com). The missing source/homepage reduces verifiability.
Instruction Scope
Runtime instructions tell the agent to create ephemeral Python scripts, install/execute the 'linkdapi' package via the 'uv run' pattern, read an environment variable (LINKDAPI_API_KEY), and print or return profile/contact data. These steps are within the stated purpose, but the SKILL.md instructs using the 'uv' tool and reading LINKDAPI_API_KEY while the metadata does not declare either — an inconsistency that could cause unexpected behavior or hidden requirements. The script examples access potentially sensitive contact info (emails/phones), which is expected for an enrichment API but should be considered sensitive.
Install Mechanism
There is no install spec (instruction-only), so dependencies will be fetched at runtime when the agent runs 'uv run'. That means the agent must download the 'linkdapi' package (and any transient dependencies) from remote package registries during execution. Not inherently malicious, but it requires network access and execution of third-party package code — the skill metadata provides no link to verify the package origin or review its source.
Credentials
The metadata declares no required environment variables, but the SKILL.md instructs users/agents to set and read LINKDAPI_API_KEY (and examples show passing an API key directly). This mismatch is a material omission: the skill will need an API key to function but does not declare it. Requesting a single service API key is proportionate to the described functionality, but the missing declaration and lack of detail about key scopes/permissions is a configurational risk. The skill also references collecting contact info (emails/phones), which is sensitive data — users should ensure they are allowed to fetch and store such data.
Persistence & Privilege
The skill does not request persistent or elevated privileges: always is false, no install spec that writes to system locations, and it is user-invocable. Autonomous invocation is allowed (default) but not combined with any excessive credential or persistence requests here.
What to consider before installing
Before installing or enabling this skill: 1) Verify the vendor and package: the registry metadata lists no homepage/source — visit and vet linkdapi.com and the 'linkdapi' PyPI package (review code, maintainers, and popularity). 2) Expect to provide an API key: SKILL.md uses LINKDAPI_API_KEY, but the skill metadata didn't declare it — do not enter high-privilege keys until you confirm what permissions the key grants. 3) Ensure the 'uv' runtime/CLI will be available in your agent environment or adapt the workflow; the metadata doesn't declare this dependency. 4) Be aware that the skill fetches potentially sensitive contact info (emails/phones); confirm legal/privacy compliance before querying third parties. 5) If you can't verify the package or service origin, run initial tests in a confined environment or sandbox and request the skill owner's source code / repository before broader use.Like a lobster shell, security has layers — review code before you run it.
apivk97d2rgwk069vdyhb58caa3knd80a2deauto-applyvk97d2rgwk069vdyhb58caa3knd80a2dejob-automationvk97d2rgwk069vdyhb58caa3knd80a2delatestvk97d2rgwk069vdyhb58caa3knd80a2delinkedinvk97d2rgwk069vdyhb58caa3knd80a2de
License
MIT-0
Free to use, modify, and redistribute. No attribution required.