pp-instagram
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
instagram-pp-cliandinstagram-pp-mcptools from the vendor's repository (github.com/mvanhorn/printing-press-library) and NPM registry (@mvanhorn/printing-press-library). - [COMMAND_EXECUTION]: The primary function of the skill involves executing the
instagram-pp-clibinary to perform analytics tasks such as account comparison, follower growth tracking, and media performance analysis. - [DATA_EXFILTRATION]: The CLI tool includes a
--deliver webhook:<url>flag and an optional feedback mechanism (INSTAGRAM_FEEDBACK_ENDPOINT) that allow the transmission of data to external endpoints. - [PROMPT_INJECTION]: The skill processes untrusted data from the Instagram Graph API, which presents a surface for indirect prompt injection.
- Ingestion points: Data retrieved from Instagram Business/Creator accounts, including media captions, comments, and competitor profiles processed by the CLI tool.
- Boundary markers: The skill instructions do not define any delimiters or warnings for the agent to ignore instructions embedded in the ingested data.
- Capability inventory: The skill has access to shell execution via the CLI, file writing through the
--deliverflag, and network operations for API requests and webhooks. - Sanitization: There is no documentation or evidence of sanitization or filtering applied to the external content before it is processed by the agent.
Audit Metadata