instagram

SUSPICIOUS. The skill’s capabilities mostly match its Instagram-management purpose, but it delegates broad read/write Instagram access and public posting to an unofficial third-party CLI. The main concerns are supply-chain trust, sensitive account access through non-vendor code, and ingestion of untrusted external content alongside exec/write capabilities.