The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The installation documentation in README.md and SKILL.md promotes a 'One-Click Install' pattern that involves piping a remote shell script directly into the bash interpreter (e.g., curl -fsSL https://raw.githubusercontent.com/cripterhack/ig-downloader-skill/main/install.sh | bash). This script is hosted on the author's official GitHub repository.
[EXTERNAL_DOWNLOADS]: The shell and PowerShell installers (install.sh, install.ps1) download third-party Python dependencies from PyPI, including instagrapi, requests, and playwright. The scripts also attempt to install the ig-downloader package itself from the local source or via git clone from the vendor's GitHub repository.
[DATA_EXFILTRATION]: The instagram_downloader.py script contains functionality to locate and read the Chrome browser's local cookie database (Network/Cookies). It uses DPAPI decryption on Windows to extract the sessionid cookie, which is then used to authenticate requests to Instagram. This behavior is a documented feature intended to simplify user authentication without requiring password sharing.
[COMMAND_EXECUTION]: The scripts/auto_release.py utility uses the subprocess module to execute git commands for parsing commit history and managing version tags. Additionally, the installation scripts use shell commands to verify the presence of Python, pip, and various AI agent directories (e.g., .claude, .cursor).

instagram-downloader