Security audit
Security checks for vulnerabilities and agentic risk
This skill does what it says: it generates promotional images, uploads them to Cloudinary, and posts them to Instagram using user-provided credentials.
Install only if you intend the agent to publish to an Instagram Business account and upload images to Cloudinary. Use a test account or least-privilege Meta token first, review captions and images before running the post command, and avoid giving it internal/private URLs for scraping.
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
)
try:
with urllib.request.urlopen(req1, timeout=30) as r:
result1 = json.loads(r.read().decode())
creation_id = result1.get("id")
if not creation_id:
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
)
try:
with urllib.request.urlopen(req2, timeout=30) as r:
result2 = json.loads(r.read().decode())
post_id = result2.get("id")
if post_id:
Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration.
req = urllib.request.Request(url, data=data)
try:
with urllib.request.urlopen(req, timeout=30) as r:
result = json.loads(r.read().decode())
secure_url = result.get("secure_url")
if secure_url:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Two-step: (1) create media container, (2) publish.
Required env vars:
IG_ACCESS_TOKEN - Page Access Token from Meta Graph API Explorer
IG_BUSINESS_ACCOUNT_ID - Numeric IG Business Account ID
Usage:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Two-step: (1) create media container, (2) publish.
Required env vars:
IG_ACCESS_TOKEN - Page Access Token from Meta Graph API Explorer
IG_BUSINESS_ACCOUNT_ID - Numeric IG Business Account ID
Usage:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Two-step: (1) create media container, (2) publish.
Required env vars:
IG_ACCESS_TOKEN - Page Access Token from Meta Graph API Explorer
IG_BUSINESS_ACCOUNT_ID - Numeric IG Business Account ID
Usage:
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
Two-step: (1) create media container, (2) publish.
Required env vars:
IG_ACCESS_TOKEN - Page Access Token from Meta Graph API Explorer
IG_BUSINESS_ACCOUNT_ID - Numeric IG Business Account ID
Usage:
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
b64 = base64.b64encode(img_data).decode("ascii")
url = f"https://api.cloudinary.com/v1_1/{cloud_name}/image/upload"
data = urllib.parse.urlencode({
"file": f"data:image/png;base64,{b64}",
"folder": folder,
This code performs an HTTP(S) request to a user-supplied site and reads the full response body, then extracts email and phone information from it. While the script's purpose is scraping, there is no runtime disclosure or confirmation near the network operation itself that it will contact external hosts and process retrieved content.
No suspicious patterns detected.