instagram-scraper

SUSPICIOUS: The skill’s core function matches Instagram scraping, but its trust model is weaker than expected. It reads a raw local credential file and forwards the token to a Gooseworks proxy, with only partial public verification for the login flow, credential path, and proxy/upstream relationship. This looks more like a managed third-party integration than direct malicious behavior, but the credential handling and proxy routing make it medium risk.