instagram-chrome-post

The script appears to be a legitimate Chrome automation setup helper, not malware. It does not harvest data or perform exfiltration. However, enabling CDP on port 9222 with --remote-allow-origins=* creates a security exposure and should be restricted to trusted local automation, with the port protected from network access and the origin allowlist narrowed or omitted where possible.