Linkedin Content Planner

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:39 PM UTC
• Version:
  1.0.0

Overview

This is a markdown-only LinkedIn content planning skill with no code execution, credentials, persistence, or hidden data access.

Safe to install as a LinkedIn planning aid. Be aware that a generic request like "plan my week" may invoke it unintentionally, and review any suggested posts, comments, or DMs yourself before publishing or sending them.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The trigger phrases 'plan my week' and 'what should I post this week' are broad enough to overlap with ordinary planning requests that may not specifically intend to invoke a LinkedIn content-planning skill. In an agentic environment, this can cause accidental skill activation, leading to irrelevant outputs, context leakage into the wrong tool, or interference with the user's actual task flow.

VirusTotal

66/66 vendors flagged this skill as clean.