instabot

Warn

Audited by Socket on May 3, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s purpose and capabilities are broadly aligned, and the CLI install path is from an official registry, not an obvious malware delivery path. However, all Instabot access and credentials are mediated through Membrane, creating a third-party credential/data routing layer with remote action generation and some real-world side-effect actions; this is coherent but higher-risk than a direct official Instabot integration.

Confidence: 85%Severity: 57%
Audit Metadata
Analyzed At
May 3, 2026, 01:03 AM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Finstabot%2F@8a92dc06e52d37debb2c5439a7f305d83941783e
Security Audit — socket — instabot