技能 manage-linkedin-network
📦
manage-linkedin-network
內容修訂 r1 中風險 📁 檔案系統存取⚙️ 外部命令🌐 網路存取
在 Rarefriend 中管理 LinkedIn 關係
LinkedIn 關係脈絡難以搜尋，也容易遺失。此技能可協助助理使用 Rarefriend 尋找聯絡人、管理筆記、套用標籤，並準備外聯。
支援: Claude Codex Code(CC)
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "manage-linkedin-network" from https://skillstore.io/skills/whitefield-labs-manage-linkedin-network.md and its manifest at https://skillstore.io/api/skills/whitefield-labs-manage-linkedin-network/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「manage-linkedin-network」。 Who do I know at Stripe?
預期結果:
一份精簡清單，列出相符的 LinkedIn 聯絡人、其職務、來源標籤，以及任何有用的關係筆記。
正在使用「manage-linkedin-network」。 Add a note that I met Priya at SaaS Summit and should follow up in July.
預期結果:
確認筆記已新增至正確聯絡人，並摘要關鍵後續追蹤脈絡。
正在使用「manage-linkedin-network」。 Prepare me for a call with Marcus Johnson.
預期結果:
一份會議簡報，包含目前職務、公司、過往筆記、重要標籤，以及建議的對話重點。
安全審計
中風險v4 • 2026/7/7 開啟版本化報告
Most static findings are false positives from Markdown code spans, local MCP configuration paths, and provider URLs. Three external-command findings are confirmed because setup runs @rarefriend-ai/mcp through npx with credentials. No prompt injection attempt was found.
2
已掃描檔案
292
分析行數
3
複核項目
0
已忽略的誤報
已確認的安全問題 (2)
中
Third-Party MCP Package Execution With Credentials
Setup instructions run @rarefriend-ai/mcp through npx and pass Rarefriend client credentials to that process. This is expected for the integration, but it creates supply-chain and credential exposure risk.
The setup command and config both identify npx execution of @rarefriend-ai/mcp with credential environment variables. The risk is contextual, not malicious intent.
中
Sensitive Contact Data Sent To External Service
The skill directs users to sync LinkedIn contacts through a Rarefriend Chrome extension. It also describes optional Google and Microsoft contact or calendar integration.
The cited lines explicitly describe browser-based LinkedIn sync and optional Google or Microsoft contact and calendar connections. This clearly expands third-party handling of professional relationship data.
能力複核項目 (3)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
中
Ruby/shell backtick execution
2. **Claude Code / Codex:** run `claude mcp add rarefriend -e RAREFRIEND_CLIENT_ID=your_id -e RAREFR
The line instructs users to run a Claude MCP setup command that launches @rarefriend-ai/mcp through npx. This is expected setup, but it executes third-party package code with Rarefriend credentials.
中
Ruby/shell backtick execution
3. **Cursor:** add to `~/.cursor/mcp.json` under `mcpServers.rarefriend` with `command: npx`, `args:
The Cursor configuration sets command: npx with @rarefriend-ai/mcp and passes client credentials through environment variables. That is a real external package execution and credential handling risk.
中
Ruby/shell backtick execution
4. **Claude Desktop:** add the same block to `claude_desktop_config.json`
This line tells Claude Desktop users to add the same MCP server block described above. It continues setup for a third-party npx package that will run with credentials.
風險因素
📁 檔案系統存取 (6)
⚙️ 外部命令 (60)
SKILL.md:50 SKILL.md:53 SKILL.md:54 SKILL.md:55 SKILL.md:60-62 SKILL.md:62-67 SKILL.md:67-68 SKILL.md:68-69 SKILL.md:69 SKILL.md:72 SKILL.md:73-74 SKILL.md:74 SKILL.md:92 SKILL.md:100-106 SKILL.md:106-108 SKILL.md:108-109 SKILL.md:109-110 SKILL.md:110-111 SKILL.md:111-113 SKILL.md:113-115 SKILL.md:115 SKILL.md:121-126 SKILL.md:126-130 SKILL.md:130-131 SKILL.md:131-132 SKILL.md:132-139 SKILL.md:139-148 SKILL.md:148-150 SKILL.md:150-156 SKILL.md:156-160 SKILL.md:160-164 SKILL.md:164-169 SKILL.md:169-173 SKILL.md:173 SKILL.md:174 SKILL.md:175 SKILL.md:176 SKILL.md:180-181 SKILL.md:181-187 SKILL.md:187-192 SKILL.md:192-200 SKILL.md:200-201 SKILL.md:201-202 SKILL.md:202-203 SKILL.md:203-204 SKILL.md:204-205 SKILL.md:205-206 SKILL.md:206-207 SKILL.md:207-208 SKILL.md:208-209 SKILL.md:209-210 SKILL.md:210-211 SKILL.md:211-212 SKILL.md:212-213 SKILL.md:213-214 SKILL.md:214 SKILL.md:215-216 SKILL.md:216-223 SKILL.md:223 SKILL.md:224-227
🌐 網路存取 (5)
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/whitefield-labs-manage-linkedin-network/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/whitefield-labs-manage-linkedin-network?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/whitefield-labs-manage-linkedin-network?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/whitefield-labs-manage-linkedin-network/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/whitefield-labs-manage-linkedin-network.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
Whitefield-Labs. (2026). manage-linkedin-network security audit report (audit version 4) [Author version unspecified]. Skillstore. https://skillstore.io/skills/whitefield-labs-manage-linkedin-network/audits/4BibTeX 引用
@techreport{whitefield-labs-whitefield-labs-manage-linkedin-network-2026,
author = {Whitefield-Labs},
title = {manage-linkedin-network security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/whitefield-labs-manage-linkedin-network/audits/4},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "manage-linkedin-network security audit report (audit version 4)"
version: "unspecified"
type: report
authors:
- name: "Whitefield-Labs"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/whitefield-labs-manage-linkedin-network/audits/4"
identifiers:
- type: other
value: "skillstore:whitefield-labs-manage-linkedin-network:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 41
架構
85
可維護性
85
內容
67
社群
83
規範符合度
你可以打造什麼
準備投資人會議
在你的 LinkedIn 人脈中尋找投資人、檢視過往筆記，並在外聯前找出暖介紹路徑。
維護招募關係
為候選人加上標籤、記錄對話，並在出現新的招募需求時依職務或公司搜尋。
整理專業後續追蹤
記錄會議脈絡、釘選重要筆記，並在拜訪客戶前依公司尋找聯絡人。
試試這些提示
尋找某家公司的人脈
Find everyone I know at [company] from LinkedIn and summarize their current roles.
準備會議
Prepare me for my meeting with [person]. Include their profile, notes, last interaction, and suggested follow-ups.
標記一個群體
Find LinkedIn contacts at [company or sector] and tag the relevant people as [tag]. Confirm before applying changes.
建立外聯候選名單
Create a shortlist of [target role] contacts in [industry]. Prioritize warm relationships and include outreach context from notes.
最佳實務
- 在新增筆記或標籤前，確認確切聯絡人，以避免更新錯誤的人。
- 針對來源、關係類型、狀態與職務使用一致的標籤名稱。
- 同步聯絡人前，檢查 Rarefriend 權限並保護 MCP 憑證。
避免
- 不要將真實的 Rarefriend client secrets 貼到聊天紀錄或共享文件中。
- 不要在未先顯示擬議變更的情況下批次編輯聯絡人。
- 不要在未檢查同步狀態的情況下假設 LinkedIn 資料是最新的。
常見問題
此技能會直接連接到 LinkedIn 嗎？
不會。它使用來自 Chrome 擴充功能同步或 CSV 匯入的 Rarefriend 資料。
需要哪些設定？
你需要 Rarefriend MCP 憑證，以及支援的 MCP 用戶端，例如 Claude Code、Codex 或 Cursor。
它可以新增關係筆記嗎？
可以。它可以透過 Rarefriend 工具建立、更新、釘選、搜尋、列出及刪除筆記。
它可以用標籤整理聯絡人嗎？
可以。它可以為聯絡人列出、新增、移除及重新命名標籤。
將憑證儲存在 MCP config files 中安全嗎？
這很常見，但你應該保護這些檔案，且絕不要提交或分享它們。
如果 LinkedIn 同步尚未完成，會發生什麼事？
此技能會檢查同步狀態，並引導使用者等待、重試，或在 Rarefriend 中完成設定。
開發者詳細資訊
授權
MIT-0
Skillstore 修訂
r1
版本提示
作者未聲明版本。
引用
36e07d5e13068e5be64447e8f20b427cf2cbd21a
維護新鮮度
2026/7/18
使用量
1 次下載 · 0 次瀏覽
檔案結構