Security audit
Security checks for vulnerabilities and agentic risk
This skill provides a disclosed preview of future Instagram features and an optional waitlist signup that requires your permission.
This version does not operate Instagram. If you join the optional waitlist, Agiexa receives your email, role, and any optional link or message you provide, including a store URL if supplied. No passwords or tokens are needed.
The supplied code only POSTs to Agiexa's agent waitlist endpoint. It does not connect Instagram to Shopify or provide any of the described publishing, messaging, comment-management, or insights functionality. Although the destination is the declared provider, waitlist enrollment is a materially different primary purpose, not merely an implementation detail of those tools.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
openclaw:
requires:
bins:
- curl
homepage: https://agiexa.com/integrations/instagram
---
The manifest at L003 describes a skill providing 30 tools for publishing posts, handling comments and messages, and checking insights. However, L071 instructs the agent to defer requests for those capabilities until November 2026, while L083–L103 provide an executable workflow for submitting user contact details to a waitlist endpoint. This materially differs from the operational Instagram integration advertised in the manifest, although the waitlist submission explicitly requires consent.