v4.1.1

Security patch and local Claude extension

4.1.1 requires MCP TypeScript SDK 1.32.1 and enables the 10,000-element input guard. npm bytes/provenance, GitHub Packages, active MCP Registry metadata and the source tag have been independently verified. The tool count stays 24.

The unsigned linkedin-mcp-tools-4.1.1.mcpb and matching checksum below package that exact public npm runtime. Download both into the same folder and verify the checksum before installing. SHA-256:

373844201bb51f54b9f69f5373abe974b30287a2b064fe00a3ddc49e6a584b87

Hosted Mac and Windows builds passed manifest validation, packed/unpacked 24-tool discovery, cold whoami and input-guard checks, without browser launch or LinkedIn access. Native 4.1.1 app installation and live account compatibility remain untested. Local Node code has your computer account's access; review Claude's unsigned-extension warning. This is a local extension, not an approved Claude directory connector. It does not fill or submit job applications; PR #5 job briefs remain excluded.

Setup · Evidence and remaining scope

What's Changed

• Pin Claude Desktop bundle to 4.1.0 by @devag7 in #37
• Prepare 4.1.0 first-use pilot and status by @devag7 in #38
• Align agent guidance with published 4.1.0 by @devag7 in #39
• Document native Claude 4.1.0 bundle check by @devag7 in #40
• Add private GitHub traffic ledger by @devag7 in #41
• Fix MCP validation limits and prepare 4.1.1 by @devag7 in #42
• Pin 4.1.1 install guidance before publication by @devag7 in #43

Full Changelog: v4.1.0...v4.1.1