ClawHub
Back to skill

Security audit

scraping-instagram-posts-by-hashtag

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says, but it collects Instagram profile-linked post data through Apify with weak privacy, compliance, and token-handling guidance.

Review before installing. Use a dedicated Apify token, avoid pasting token-bearing URLs into logs or shared terminals, set explicit maxItems limits, and only collect or export Instagram data when it complies with applicable laws, platform terms, and your organization’s data-handling rules.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (5)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill explicitly enables collection of Instagram author handles, captions, engagement metrics, timestamps, and URLs via a third-party scraping service, but it does not clearly warn users about privacy, third-party data transfer, or platform-policy implications. This can lead users to unknowingly export personal or profile-linked data to Apify and handle scraped data without appropriate consent, disclosure, or compliance controls.

External Transmission

Medium
Category
Data Exfiltration
Content
**REST API fallback:**
```bash
curl -X POST \
  "https://api.apify.com/v2/acts/apidojo~instagram-hashtag-scraper/runs?token=$APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"keywords": ["tag1"], "maxItems": 100}'
Confidence
90% confidence
Finding
This instruction sends user-supplied scraping parameters and an authentication token to an external third-party API, which is a real external data transmission. In this skill context that behavior is expected, but it is still security-relevant because it exposes search targets and account usage to Apify and normalizes token-in-URL usage, which can leak via logs, shell history, or monitoring systems.

External Transmission

Medium
Category
Data Exfiltration
Content
Fetch results:
```bash
curl "https://api.apify.com/v2/actor-runs/$RUN_ID/dataset/items?token=$APIFY_TOKEN&format=json"
```

### Step 3: Handle Edge Cases
Confidence
91% confidence
Finding
Fetching dataset items retrieves scraped Instagram data from a third-party service and includes the API token in the URL, creating both a privacy and credential-handling risk. In this context the action is core to the skill, but it still exposes users to undisclosed third-party processing and possible leakage of access tokens or scraped personal data in logs and downstream systems.

External Transmission

Medium
Category
Data Exfiltration
Content
Fetch results:
```bash
curl "https://api.apify.com/v2/actor-runs/$RUN_ID/dataset/items?token=$APIFY_TOKEN&format=json"
```

### Step 3: Handle Edge Cases
Confidence
91% confidence
Finding
Fetching dataset items retrieves scraped Instagram data from a third-party service and includes the API token in the URL, creating both a privacy and credential-handling risk. In this context the action is core to the skill, but it still exposes users to undisclosed third-party processing and possible leakage of access tokens or scraped personal data in logs and downstream systems.

External Transmission

Medium
Category
Data Exfiltration
Content
Fetch results:
```bash
curl "https://api.apify.com/v2/actor-runs/$RUN_ID/dataset/items?token=$APIFY_TOKEN&format=json"
```

### Step 3: Handle Edge Cases
Confidence
91% confidence
Finding
Fetching dataset items retrieves scraped Instagram data from a third-party service and includes the API token in the URL, creating both a privacy and credential-handling risk. In this context the action is core to the skill, but it still exposes users to undisclosed third-party processing and possible leakage of access tokens or scraped personal data in logs and downstream systems.

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.