PassAudited by VirusTotal on May 3, 2026.
Findings (1)
The skill bundle provides instructions for an AI agent to interact with Instagram using the ClawLink integration service. The logic in SKILL.md focuses on dynamic tool discovery and execution through a specific plugin (clawlink-plugin), incorporating safety measures such as requiring user confirmation for write actions and explicitly forbidding the agent from requesting or echoing raw credentials. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the reliance on the external domain claw-link.dev is consistent with the stated purpose of using a hosted integration hub.