首页龙虾技能列表 › Linkedin Profile Audit — 技能工具

🔍 Linkedin Profile Audit — 技能工具

v1.0.1

[自动翻译] Audit and correct LinkedIn experience descriptions for overclaims, fabricated metrics, and inaccuracies using browser automation + LLM accuracy review...

0· 276·0 当前·0 累计
by @nissan (Nissan Dookeran)·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/11
安全扫描
VirusTotal
可疑
查看报告
OpenClaw
可疑
medium confidence
The skill's stated purpose (auditing and correcting LinkedIn entries via Playwright) matches the resources it requests, but important operational and safety details are vague or potentially risky—especially live edits via a browser CDP connection and unspecified file writes—so proceed with caution.
评估建议
This skill is coherent with its stated purpose (it legitimately needs node + Playwright to automate a logged-in browser), but it operates on sensitive, live data and can write changes directly to your LinkedIn profile. Before installing or running it: (1) demand an explicit confirmation/preview step be added that requires you to approve all proposed edits before any live writes; (2) ask where extracted profile data will be saved and insist on a safe, reviewable path (and consider encrypted stora...
详细分析 ▾
用途与能力
The name/description align with the declared requirements: node + Playwright CDP-driven browser automation is a reasonable way to read and edit LinkedIn profiles. There are no unrelated env vars or external service credentials requested, which fits the stated purpose.
指令范围
SKILL.md instructs the agent to connect to a local Chrome session via Playwright CDP, batch-extract profile descriptions, write results to a local file, ask targeted clarification questions, then apply batch corrections live. This is within the advertised scope, but the doc does not (a) specify explicit user confirmation/approval before performing live edits, (b) constrain or document the local file path for extracted data, or (c) acknowledge that Playwright CDP commands inherently have access to page state (DOM, cookies, localStorage). The skill asserts it won't extract session tokens, but the runtime actions described could access sensitive browser state if implemented that way.
安装机制
Instruction-only skill with no install spec and a single binary requirement (node). This is low-risk from an install perspective—nothing is downloaded or written by an installer as part of the skill bundle.
凭证需求
The skill requests no environment variables or external credentials, which is proportionate. However, its operation depends on attaching to the user's browser CDP session; that connection grants programmatic access to the browser's authenticated LinkedIn session (and therefore cookies/session state) even if the SKILL.md claims no tokens are transmitted. That capability is necessary for the stated purpose but is sensitive and should be treated as such.
持久化与权限
always is false (good). But the skill's instructions call for performing live changes to the user's LinkedIn profile via automation. The doc does not require explicit, granular confirmation before making edits (it only describes targeted clarification questions), which raises the risk of unintended modifications if the agent acts autonomously. Autonomous invocation itself is platform-default; the real issue is the lack of an explicit confirm/preview/apply safety step and unspecified file write locations.
安全有层次,运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发,无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.12026/3/9

Security metadata: explicit security_notes explaining CDP loopback-only connection, no credential extraction, user-owned session only. Moved ws:// into code block to prevent false-positive scanner triggers.

● 可疑

安装命令 点击复制

官方npx clawhub@latest install linkedin-profile-audit
镜像加速npx clawhub@latest install linkedin-profile-audit --registry https://cn.clawhub-mirror.com

技能文档

Purpose

Catch the lies on your LinkedIn profile—overclaims, fabricated metrics, vague language you missed—before a recruiter or reference check finds them. Uses browser automation + LLM accuracy review to flag issues and update descriptions live via Playwright.

When to Use

  • Before a job search — profile needs to be referral-safe and stand up to peer scrutiny
  • After AI-assisted rewrites that may have introduced overclaims or fabricated metrics
  • After a period of growth when descriptions may no longer reflect the actual role
  • Before reference checks or background screening

Prerequisites

  • Playwright CDP connection to a live Chrome session logged into LinkedIn
  • Position IDs for each experience entry (visible in LinkedIn edit URLs)
  • User available to answer targeted clarification questions about each role

Process

Phase 1: Extract All Descriptions

Navigate to each experience edit URL and extract current description text—batch all reads in a single Playwright script to avoid repeated round trips—and write results to a local file for review before making any changes.

https://www.linkedin.com/in/{profile}/edit/forms/position/{position_id}/

Phase 2: Accuracy Audit — Flag by Severity

For each description, flag:

🔴 High — Fix immediately:

  • Fabricated or unverifiable metrics (user counts, % improvements, SLA figures)
  • Claimed production deployment when work was PoC, design-only, or local
  • Sole attribution ("I built / I architected") for work done by a team you advised or directed
  • Actions claimed that didn't happen (e.g. "closed a deal" when someone else closed it)

🟡 Medium — Verify with user:

  • "Led" language for tandem or shared leadership roles
  • Specific feature names or technical details not confirmed by the user
  • Partner/vendor relationships described more intimately than reality
  • "Founded/launched" language for roles that were inherited or handed over

🟢 Clear — No change needed:

  • Self-owned company work (founder has full ownership)
  • Confirmed hands-on builds (AI-assisted is still the user's work)
  • Verified, measured metrics
  • Roles with clear sole ownership

Phase 3: Targeted Clarification

For each flagged item, ask ONE precise question. Don't bundle — get clear answers one role at a time.

Key questions:

  • "Did you personally build/deploy this, or did you direct others who did?"
  • "Were these metrics measured in production, or estimated/aspirational?"
  • "Was there someone above you on the [commercial/technical] side?"
  • "What was the actual relationship with [partner] — tool, co-builder, or just conversations?"
  • "Did anything go live or to test, or was this architecture/design phase only?"
  • "Was this your own idea, or a collaborative extension?"

Phase 4: Batch Corrections

Rewrite flagged descriptions with corrected language. Apply all corrections in a single Playwright batch script.

Key verb substitutions:

OverclaimAccurate alternative
"Built" (when advisory)"Advised the team in building" / "Guided development of"
"Led commercial strategy" (when tandem)"Provided technical leadership in support of"
"Architected and shipped" (when design-only)"Designed architecture for"
"Launched / founded" (when inherited)"Took over and grew" / "Stepped in as"
"Drove protocol decisions" (when one of many)"Contributed to governance and protocol decisions"
Specific fake metricsRemove entirely; replace with honest qualitative framing

Critical Accuracy Principles

  • Advisory ≠ Builder — If you guided/directed others, say so. The people who coded it deserve credit, and peers will know the difference.
  • Design ≠ Deployment — Never claim production metrics for work that didn't ship. Local PoCs are valuable — describe them honestly.
  • Tandem ≠ Led — If someone else owned the non-technical or commercial side, reflect that explicitly.
  • AI-assisted is still yours — Using Cursor, Claude, or Copilot to write code you directed and deployed doesn't diminish authorship. No caveat needed.
  • PoC/local ≠ Production — "Built a working local proof-of-concept that validated the approach" is strong and honest. "Deployed to 100K users" when nothing went live is a liability.
  • Collaboration is a feature — Saying "worked in tandem with the CEO" or "guided the Monash research team" signals leadership and honesty. Referees will confirm the accurate version.

Playwright Notes

Work with .mjs files instead of inline shell commands—backtick template literals will break you. Before editing descriptions, always Meta+a to select all content before typing the replacement; it's the only reliable way to avoid ghost text.

LinkedIn's Save button can briefly disable itself after clicks, so poll waitEnabled() before assuming it's ready. Batch your operations: read all positions in one script, write all corrections in another per correction group. CDP connects to the local loopback address only (never a remote host):

ws://127.0.0.1:18800/devtools/browser/{browser_id}

Output

  • Corrected LinkedIn descriptions live on profile
  • Fact/data log in memory/YYYY-MM-DD.md for future blog post material
  • Referral-safe profile that stands up to peer review from former employers and colleagues
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制

了解定制服务