The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill interacts with Apify's official infrastructure (api.apify.com) to fetch data and utilizes the apify-cli package via npx for configuration checks. Apify is a well-known automation and web scraping service.
[COMMAND_EXECUTION]: The skill uses shell commands to check for environment variables, verify local CLI tools, and open the system's default browser for account setup. These are standard operations for CLI-based tool configuration and do not attempt privilege escalation.
[CREDENTIALS_UNSAFE]: The skill manages an Apify API token supplied by the user. It follows secure practices by advising the user to store the token in environment variables or .env files and warns against echoing the token or committing it to version control.
[SAFE]: The skill includes a referral link in the sign-up URL (?fpr=z8j1nz), which is explicitly disclosed to the user as a referral link in the instructions.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Instagram (such as user comments and bios). While this represents a potential attack surface, the instructions guide the agent to treat this data as output for the user rather than passing it into further executable commands or logic, effectively mitigating the risk.

instagram-scraper