instagram-publish
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script uses standard Python
argparseandrequeststo interact with the Meta Graph API. All shell commands documented in the README are intended for the user to execute the Python script or auxiliary tracking scripts. - [EXTERNAL_DOWNLOADS]: The script communicates exclusively with official Meta Graph API endpoints (
https://graph.facebook.com) to upload and publish media. It does not download external code or scripts at runtime. - [DATA_EXFILTRATION]: No sensitive data exfiltration detected. The script reads credentials from a local configuration file (
~/.openclaw/credentials/instagram_config.json) specifically designed for this skill's use. Media URLs are provided by the user via command-line arguments. - [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to store their Meta Access Tokens in a dedicated configuration file inside the home directory, rather than hardcoding them in the source code.
Audit Metadata