linkedin-candidate-search

• Outcome: Review
• Latest audit: May 29, 2026 at 9:36 PM UTC
• Version:
  1.0.0

Overview

The skill’s LinkedIn search purpose is clear, but it asks users to copy sensitive Chrome session/profile files and stores scraped candidate profile data locally without enough guardrails.

Review before installing. Use a dedicated Chrome profile created only for this workflow, log into LinkedIn manually there, avoid copying your main Chrome Cookies or Login Data, close the remote-debug Chrome process after use, and delete both the temporary browser profile and saved candidate files when they are no longer needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill explicitly automates scraping and persistent storage of LinkedIn candidate profiles under local directories, but it does not present a meaningful user-facing consent notice, retention policy, or data minimization controls. Because the saved files include profile URLs and inferred employment attributes, this creates privacy and compliance risk from collecting and retaining personal data without clear disclosure.

Missing User Warnings

High

• Confidence: 98% confidence
• Finding: The skill instructs the operator to copy Chrome profile artifacts including Cookies, Login Data, Web Data, Preferences, and Local State into a debug profile and use that profile to access LinkedIn. This exposes authenticated browser data and potentially sensitive tokens or stored secrets without an adequate privacy or security warning, increasing the risk of session compromise and unintended access to account data.

VirusTotal

65/65 vendors flagged this skill as clean.