ReviewAudited by ClawScan on May 3, 2026.
Overview
This appears to be a coherent Instagram integration, but it relies on ClawLink OAuth and can publish or manage public Instagram content, so users should review permissions and confirmations carefully.
This skill does not show malicious or deceptive behavior in the provided artifacts. Before installing, make sure you trust ClawLink, review the Instagram OAuth permissions, and only approve previews for posts, comments, messages, or bulk actions that you actually want performed.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If approved, the agent may publish content or comments on the user's Instagram account.
The skill can perform public-facing Instagram write actions, but it explicitly requires confirmation for external-facing or bulk writes.
- Create and publish media containers - Post comments on media ... - Ask for confirmation before destructive, external-facing, or bulk write actions.
Review previews and confirmation prompts carefully before allowing any post, comment, message, bulk action, or destructive change.
Connecting Instagram grants ClawLink/OpenClaw delegated access to whichever Instagram permissions the user approves.
The skill requires delegated Instagram account access through OAuth, which is expected for this purpose but gives the integration account-level permissions.
ClawLink's hosted page runs the Instagram OAuth flow — the user clicks through the login and authorization screen.
Connect only the intended Instagram account, review OAuth scopes during authorization, and revoke access from Instagram/Meta or ClawLink if no longer needed.
The actual runtime behavior depends on the ClawLink plugin and hosted service, not just this SKILL.md file.
The instruction-only skill depends on a separate plugin that was not included in the provided files for static review.
Install the verified ClawLink plugin: `openclaw plugins install clawhub:clawlink-plugin`
Install the plugin only from the expected ClawHub source and review ClawLink's verification/source links before trusting it with Instagram access.
Instagram-related requests, account metadata, and action results may be processed through ClawLink tools.
Instagram actions and tool schemas are mediated through the ClawLink gateway, so requests and results depend on a third-party integration boundary.
ClawLink provides tools dynamically based on what the user has connected... Execute with `clawlink_call_tool`.
Use this only if you trust ClawLink as the integration provider and avoid sending unnecessary sensitive content through the tool calls.