instagram-automation
Warn
Audited by Snyk on Feb 20, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to call Instagram APIs such as INSTAGRAM_GET_IG_USER_MEDIA, INSTAGRAM_GET_IG_MEDIA, INSTAGRAM_GET_POST_INSIGHTS and INSTAGRAM_GET_IG_MEDIA_COMMENTS to fetch user-generated Instagram posts, comments and insights (untrusted third-party content) which the agent is expected to read/interpret and which can influence publishing/analysis decisions.
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill requires adding and calling the Rube MCP endpoint (https://rube.app/mcp) at runtime (via RUBE_SEARCH_TOOLS) to fetch current tool schemas which directly control the agent's available tools and instructions, creating a high-risk external dependency.
Audit Metadata