instagram-publisher
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: The core purpose is coherent, and the Meta API usage is consistent with Instagram publishing. However, the skill routes local images through ImgBB for public hosting before posting, creating a significant third-party data exposure path, and it can autonomously perform public posting. No evidence of malware or deceptive installer behavior was found, but the data-flow and action scope make it medium-high risk.
Confidence: 91%Severity: 66%
Audit Metadata