instagram-skill

SUSPICIOUS: the skill is internally consistent with Instagram DM automation, but it routes sensitive account actions through an unofficial third-party CLI and enables autonomous messaging actions. Provenance appears same-org and registry-based rather than overtly malicious, so this is not confirmed malware, but it carries meaningful security and account-trust risk.