scrapesocial-instagram
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from Instagram, including profile bios, post captions, video transcripts, and user comments, which could contain instructions meant to influence the agent's behavior.
- Ingestion points: Data is retrieved via
instagram comments,instagram transcript,instagram profiles get, andinstagram postsas described in SKILL.md and references/instagram-command-map.md. - Boundary markers: No specific delimiters or instructions are provided to the agent to distinguish between retrieved data and control instructions.
- Capability inventory: The skill uses the
scrapesocialCLI tool for research and data retrieval tasks. - Sanitization: There is no evidence of sanitization or filtering applied to the external Instagram content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
scrapesocialpackage from the NPM registry. This is an external dependency necessary for the skill's core functionality.
Audit Metadata