instagram-marketing

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides Node.js code examples for interacting with the Facebook and Instagram Graph APIs. These snippets demonstrate secure credential management by fetching sensitive values (e.g., FB_APP_ID, FB_APP_SECRET) from environment variables rather than hardcoding them.
  • [EXTERNAL_DOWNLOADS]: The skill references official Meta API domains (graph.facebook.com and graph.instagram.com) for authentication and content operations. The use of demonstration media URLs from brightbody.co is a standard practice for documenting API functionality that requires publicly reachable content.
  • [INDIRECT_PROMPT_INJECTION]: The instructions suggest engaging with user comments and DMs to build relationships. While this constitutes an ingestion point for untrusted data, the skill does not instruct the agent to process these messages in a way that would bypass safety protocols or execute arbitrary instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 03:22 PM