instagram-publisher

Warn

Audited by Socket on Sep 23, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The core purpose is coherent, and the Meta API usage is consistent with Instagram publishing. However, the skill routes local images through ImgBB for public hosting before posting, creating a significant third-party data exposure path, and it can autonomously perform public posting. No evidence of malware or deceptive installer behavior was found, but the data-flow and action scope make it medium-high risk.

Confidence: 91%Severity: 66%
Audit Metadata
Analyzed At
Sep 23, 2026, 08:57 PM
Package URL
pkg:socket/skills-sh/renatoasse%2Fopensquad%2Finstagram-publisher%2F@41a4f725ef09c04472310a3952d036edace0100dcf44902d91af662bf78519ff