instagram-scraper

Warn

Audited by Socket on Oct 18, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill's scraping behavior matches its stated purpose, and the GooseWorks CLI/login path appears to be an official same-publisher npm flow. However, it reads a raw API key from a local credential file and routes all requests through GooseWorks and Orthogonal instead of using Scrape Creators' direct official API, creating a disproportionate credential and data-forwarding path for a simple Instagram lookup skill.

Confidence: 88%Severity: 56%
Audit Metadata
Analyzed At
Oct 18, 2026, 01:00 PM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Finstagram-scraper%2F@29b147ae8ff94aa45032284c64250e8d8febc3dc1a15df09f059cfa28f92bbcc