insta

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). An operational instruction uses curl to fetch and execute an external remote installation script from https://raw.githubusercontent.com/InsForge/insta-cli/main/install.sh, representing a weak/unknown/suspicious runtime dependency pattern.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill operates an infrastructure management platform (InstaCloud) via CLI/MCP commands that include subscription upgrades (insta --agent billing subscribe, line 388) and domain purchases (domain.purchase, line 265). These represent direct financial operations (charges/purchases/subscriptions). However, these operations require authentication via the InstaCloud platform login (insta --agent login, or API keys/device flow), establishing an authenticated session and independent service-side access control. Therefore, this qualifies as a direct financial operation with independent access control, placing it at the medium tier.