instagram

SUSPICIOUS: the skill’s purpose matches Instagram automation, and the install path appears to be the publisher’s documented npm workflow, but the actual trust boundary is much broader than a normal first-party integration. The agent executes an external CLI and sends credentials/action traffic through ClawLink’s hosted service, which holds provider OAuth tokens server-side and proxies Instagram access. This is coherent with the stated product design, but it is still a meaningful third-party credential and data-routing risk.