ClawHub
Back to skill

Security audit

Instagram Video Downloader

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward Instagram video-link parser that uses a disclosed third-party API, with some privacy, credential-handling, and lawful-use cautions users should understand.

Install only if you are comfortable sending submitted Instagram URLs and your RedFox API key to redfox.hk. Prefer an environment variable over CLI arguments or plaintext config files, avoid --save-key on shared or synced machines, and only download or reuse content when you have permission and comply with applicable rules.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Output HandlingUnvalidated Output Injection, Cross-Context Output, Unbounded Output
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (9)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The README encourages invocation through very broad natural-language phrases like 'Help me save this IG video' and 'Download this IG video', which can be triggered by ordinary conversation rather than deliberate tool use. In an agent environment, this increases the chance of accidental invocation and unintended transmission of Instagram links or related user content to the external service.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill documents use of an external RedFoxHub API but do not warn users that submitted Instagram links and associated metadata may be transmitted to a third-party service. This can mislead users about data handling and creates privacy risk, especially when links may reveal private interests, research targets, or account activity.

Vague Triggers

Medium
Confidence
87% confidence
Finding
The skill advertises very broad natural-language triggering such as 'describe your need directly' without defining boundaries, required confirmation, or disallowed actions. In an agent setting, this increases the chance of overbroad invocation, unintended downloads, or misuse when ambiguous user messages are interpreted as authorization to fetch third-party content.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The README promotes downloading watermark-free Instagram videos for reuse, backup, and secondary creation but does not include any copyright, permission, platform-terms, or lawful-use warnings. This materially increases misuse risk by normalizing extraction and reuse of third-party content in potentially infringing or unauthorized ways.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill sends user-supplied Instagram URLs to the third-party redfox.hk API for parsing, but it does not clearly warn users that their links and associated metadata will leave the local environment. This creates a privacy and data-handling risk, especially if users submit sensitive, private, or identifying content under the assumption the processing is local.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs users to place API credentials in plaintext environment variables, CLI arguments, or a JSON config file without warning about the exposure risks of those methods. Secrets passed on the command line may be visible in shell history or process listings, and plaintext files can be read by other local users or accidentally committed to source control.

Missing User Warnings

Medium
Confidence
86% confidence
Finding
The script can persist an API key to disk in a user config file when --save-key is used, but it does so without a clear warning that credentials will be stored locally. Although the file permissions are restricted to 0600, local secret persistence still increases the exposure window through backups, endpoint compromise, shared home directories, or accidental inclusion in dotfile sync tooling.

Unbounded Output

Medium
Category
Output Handling
Content
### Core Features

- **Video Parsing**: paste an Instagram video post link to parse out the watermark-free video download URL.
- **Complete Information**: displays resource type, duration, download link, cover link, and full description line by line without truncation.
- **Dual Format Support**: recognizes both Reel short videos and regular post video links.

---
Confidence
82% confidence
Finding
without truncation

Unbounded Output

Medium
Category
Output Handling
Content
print(f"\n{GREEN}{BOLD}✓ Parsed successfully!{RESET}")

    # Full description (original text, no truncation)
    if desc:
        print(f"\n{CYAN}{BOLD}📝 Description:{RESET}")
        for line in str(desc).splitlines():
Confidence
71% confidence
Finding
no truncation

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.