instagram-place-posts

SUSPICIOUS: The stated purpose matches Instagram location scraping, but the execution model is riskier than necessary because it asks the agent to eval shell generated by local Python scripts and to trust authenticated browser context without script review. No direct credential theft or third-party exfiltration is evident, but the opaque command chain and anti-detection guidance make this higher-risk than a normal documentation skill.