instagram-scraper
Warn
Audited by Socket on Oct 18, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill's scraping behavior matches its stated purpose, and the GooseWorks CLI/login path appears to be an official same-publisher npm flow. However, it reads a raw API key from a local credential file and routes all requests through GooseWorks and Orthogonal instead of using Scrape Creators' direct official API, creating a disproportionate credential and data-forwarding path for a simple Instagram lookup skill.
Confidence: 88%Severity: 56%
Audit Metadata