instabot
Warn
Audited by Socket on May 3, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned, and the CLI install path is from an official registry, not an obvious malware delivery path. However, all Instabot access and credentials are mediated through Membrane, creating a third-party credential/data routing layer with remote action generation and some real-world side-effect actions; this is coherent but higher-risk than a direct official Instabot integration.
Confidence: 85%Severity: 57%
Audit Metadata