skills/browser-act/skills/instagram-hashtag-posts/Socket

instagram-hashtag-posts

Warn

Audited by Socket on Jun 13, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's goal matches Instagram hashtag scraping, but it expands into authenticated request replay, shell eval, and scaling guidance for stealth multi-session scraping. Data does not appear to be exfiltrated to a third party, so this is not confirmed malware, but the execution model and credential reuse make it a medium-high risk skill.

Confidence: 100%Severity: 60%

Audit Metadata

Analyzed At

Jun 13, 2026, 04:40 AM

Package URL

pkg:socket/skills-sh/browser-act%2Fskills%2Finstagram-hashtag-posts%2F@7a47b9016a7159d140277a44256ed6a8884bfc22c02584fdfe5edaa9554e130b