instagram

Warn

Audited by Socket on Jul 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's functionality matches its stated Instagram-data purpose, and the only documented endpoint is the vendor's own API, so this is not overt malware. However, it routes all access and credentials through TikHub rather than official Instagram/Meta APIs, and it encourages downstream skill handoffs that expand trust scope.

Confidence: 87%Severity: 56%
Audit Metadata
Analyzed At
Jul 8, 2026, 09:43 AM
Package URL
pkg:socket/skills-sh/TikHub%2Ftikhub-plugin%2Finstagram%2F@d15c27811e8fe31bdb4384cf302012c9254fe0b555e9fdd006da1ef3bb63e69d