instagram-caption-scraper
v1.0.0Scrapes and returns the caption from any public Instagram post or reel URL. Use this when the user shares an Instagram link and wants to extract, read, summa...
⭐ 1· 114·0 current·0 all-time
by@rdk14
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the implementation: the script extracts the shortcode from /p/ or /reel/ URLs and uses instaloader to fetch caption and basic metadata. There are no unrelated requirements (no cloud credentials, no access to other services).
Instruction Scope
SKILL.md instructs the agent to run the included python script with a provided Instagram URL and to display the raw caption before any summary. The script only reads the provided URL (or stdin/argv) and performs a network fetch to Instagram via the instaloader library; it does not reference other files, environment variables, or external endpoints.
Install Mechanism
This is an instruction-only skill with a requirements.txt pointing to instaloader==4.14.1 (PyPI). Installing a PyPI dependency is expected for a Python scraper; this is moderate-risk compared with no installs but there are no downloads from unknown hosts or archive extraction. Note: the SKILL.md includes a dependency declaration (python3 + instaloader) while registry metadata listed no required binaries — a minor metadata inconsistency.
Credentials
No environment variables or credentials are required by default. The README and script comment mention optionally adding Instagram login credentials to access private posts; that would require the user to provide credentials (prefer secure storage instead of embedding credentials in the script). The current skill does not attempt to access any unrelated secrets or config paths.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request permanent presence or modify other skills or system-wide settings. The instaloader library may create session/cache files if you log in, but the skill itself does not persist or alter agent configuration.
Assessment
This skill is coherent with its stated purpose: it runs a Python script that uses the well-known instaloader package to fetch captions from public Instagram posts. Before installing, consider: (1) installing packages from PyPI carries routine risk — verify the instaloader version and source; (2) the tool will make HTTP requests to instagram.com (expected), may be rate-limited or blocked, and cannot access private posts without login; (3) do NOT paste Instagram credentials into the script file — if you need to log in, use secure credential storage or the library's recommended session handling; (4) because it's an instruction-only skill, it only runs when invoked, so limit use to cases where a user supplies a valid Instagram URL. If you want higher assurance, inspect the included instagram_scraper.py file (provided) and review the instaloader package release notes for the pinned version.Like a lobster shell, security has layers — review code before you run it.
latestvk97fe6saqe2fzsac4hapfzz19n8368xb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.