instagram-profile-posts

SUSPICIOUS: the core purpose matches Instagram post scraping, and the named tool provenance is mostly coherent, but the skill uses authenticated browser state, executes shell produced by local scripts via eval, discourages script inspection, and explicitly recommends stealth multi-session rate-limit evasion. Those behaviors are disproportionate to a normal documentation-style scraping helper, though there is no clear evidence of credential theft or third-party exfiltration.