Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlandjqwithin Bash scripts to interact with the official Instagram Graph API (graph.facebook.com). These operations are consistent with the skill's primary purpose of publishing media. - [DATA_EXPOSURE]: The skill handles sensitive environment variables (
$INSTAGRAM_ACCESS_TOKENand$INSTAGRAM_IG_USER_ID) provided by the platform connector. It includes explicit instructions never to echo these tokens, following security best practices for credential handling. - [EXTERNAL_DOWNLOADS]: The skill references
cdn.acedata.cloudfor hosting media files. As this domain is associated with the skill's author (acedatacloud), this is considered standard vendor infrastructure usage for its intended purpose. - [SAFE]: No malicious patterns, prompt injections, persistence mechanisms, or obfuscation were detected. The skill requires user confirmation of captions and media before publishing, which is a recommended safety checkpoint.
Audit Metadata