Back to skill
Skillv1.0.7

VirusTotal security

Instagram Scraper · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

SuspiciousApr 30, 2026, 3:36 AM
Hash
4839cba7294d51e81782d1e21479e4b9b5f361d34231f11d618a195cb51b96af
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: instagram-scraper Version: 1.0.7 The skill describes a powerful web scraping tool utilizing full browser automation (Playwright) and extensive network access, including residential proxy support. While the `SKILL.md` does not contain explicit prompt injection or direct evidence of malicious intent, it details capabilities that are inherently risky, such as handling sensitive Google API keys and proxy credentials (username/password) via environment variables. The potential for misuse or vulnerabilities in the underlying (unseen) code that implements these powerful features, even if plausibly needed for the stated purpose, warrants a 'suspicious' classification.
External report
View on VirusTotal