instagram-skill

Warn

Audited by Socket on Apr 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The stated purpose matches the messaging capabilities, but the skill depends on an unverifiable third-party CLI and grants it access to a logged-in Instagram account for reading and sending private messages. The largest risks are supply-chain trust and autonomous real-world messaging without explicit per-action approval.

Confidence: 80%Severity: 78%
Audit Metadata
Analyzed At
Apr 5, 2026, 05:54 PM
Package URL
pkg:socket/skills-sh/supreme-gg-gg%2Finstagram-cli%2Finstagram-skill%2F@9351323cf3e980a1e1f90bd91efe31fc4d2294da