linkedin-reader
Read LinkedIn for financial research using opencli (read-only). Use this skill whenever the user wants to read their LinkedIn feed, search for jobs in the finance/trading industry, view professional posts about markets or earnings, or gather professional sentiment from LinkedIn. Triggers include: "check my LinkedIn feed", "search LinkedIn for", "LinkedIn posts about", "what's on LinkedIn about AAPL", "finance jobs on LinkedIn", "LinkedIn market sentiment", "who's posting about earnings on LinkedIn", "LinkedIn feed", "professional network buzz", "what are analysts saying on LinkedIn", any mention of LinkedIn in context of reading financial news, market research, job searches, or professional commentary. This skill is READ-ONLY — it does NOT support posting, liking, commenting, connecting, or any write operations.
70
85%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Low
Low-risk findings worth noting
Low
Low-risk findings.
2 low severity findings. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
SKILL reads outsider-authored free text from LinkedIn by executing opencli runtime commands that scrape visible feed posts (“opencli linkedin timeline” extracting post “text”/comments) and job search results (optionally “--details” fetching job “description”), which are authored by third parties on the public LinkedIn site.
W012: Unverifiable external dependency detected (runtime URL that controls agent).
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
The skill explicitly instructs downloading and installing the Browser Bridge extension from the GitHub releases URL (https://github.com/jackwener/opencli/releases), which fetches remote extension code that runs in the browser at runtime and is a required dependency for the skill to operate.
- Repository
- himself65/finance-skills
- Commit
81e1f50
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.