Is adamanz/instagram-skill safe?
Yes. adamanz/instagram-skill is safe to install. Oathe's behavioral security audit gave the instagram-skill skill by adamanz a trust score of 91/100 with 3 findings, none critical or high.
https://github.com/adamanz/instagram-skill
Is adamanz/instagram-skill safe to install?
This Instagram video downloading skill appears to be legitimate and safe. It uses standard tools (yt-dlp, ffmpeg) to download and process Instagram videos, with proper input sanitization and no evidence of malicious behavior. All canary files remained intact and no sensitive data access was detected from the skill code.
What security issues were found in adamanz/instagram-skill?
Category Scores
Findings (3)
MEDIUM External Program Dependencies -15 ▶
The skill executes external programs (yt-dlp, ffmpeg, ffprobe) via subprocess calls. While the input sanitization appears proper, these external dependencies could potentially have vulnerabilities.
LOW File System Writes -10 ▶
The skill downloads video files to the local filesystem at ~/clawd/media/videos/instagram/. This is expected behavior but involves writing arbitrary content from external sources.
LOW Dependency on External Services -15 ▶
The skill relies on yt-dlp's ability to access Instagram content, which could change or break. Also potential for downloading copyrighted material, though this is a legal rather than security concern.
Should I install adamanz/instagram-skill?
Oathe's verdict for adamanz/instagram-skill is SAFE with a trust score of 91/100. Recommendation: Install.