instagram-digest
v1.0.2Scrape recent Instagram reels, transcribe audio, summarize with OpenRouter, and save a digest.html file
⭐ 0· 75·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the code and runtime requirements: scraping (playwright, requests), downloading media (yt-dlp), local transcription (faster-whisper), and summarization via OpenRouter (OPENROUTER_API_KEY). The optional INSTAGRAM_USERNAME/INSTAGRAM_PASSWORD env vars are reasonable for avoiding login walls. Minor note: top-level requirements.txt includes 'anthropic' which is unused by the code; scripts/requirements.txt lists 'openai' (used) — this packaging inconsistency is likely benign but sloppy.
Instruction Scope
SKILL.md instructs running the bundled Python scripts from the skill directory (cd + python main.py) which matches the included code. The code will: (1) launch Playwright to scrape Instagram pages (may open a visible browser on login), (2) save session cookies to .instagram_session.json if you log in, (3) download thumbnails and reels via HTTP/yt-dlp, (4) transcribe using a Whisper model and (5) send transcripts to OpenRouter for summarization. These actions are within the stated purpose but result in local persistence of session cookies and outbound network traffic to Instagram, package/model hosts, and OpenRouter — the SKILL.md mostly documents this but you should expect these side effects.
Install Mechanism
There is no automated install spec; the project includes requirements files listing packages to pip install. Runtime behavior will also pull potentially large model weights via faster-whisper/WhisperModel('base') and yt-dlp will fetch media from web hosts — both can download significant data at runtime. No arbitrary archive downloads or suspicious external installers are present, but expect model and media downloads.
Credentials
The single required credential (OPENROUTER_API_KEY) is necessary for the summarization step and is declared as primary. INSTAGRAM_USERNAME/INSTAGRAM_PASSWORD are optional and used only to obtain a session for story/login-wall access; no other unrelated credentials or secrets are requested.
Persistence & Privilege
The skill writes files in its directory and temporary directories: digest.html, .instagram_session.json (persisted session cookies when you log in), and temporary media/model files (tmp directories cleaned after run, but the session file persists). always is false and the skill does not request elevated platform privileges. The persistent session file can contain authentication state — the README suggests using a throwaway account.
Assessment
This skill appears to do what it says, but review and consider the following before installing or running it:
- You must provide an OpenRouter API key; transcripts and captions are sent to OpenRouter for summarization.
- If you supply Instagram credentials, the skill will save session cookies to .instagram_session.json and reuse them — consider using a dedicated throwaway Instagram account as the SKILL.md suggests.
- The code downloads media (yt-dlp) and may download Whisper model weights at first run (faster-whisper), which can consume disk space, bandwidth, and time; run in a controlled environment (virtualenv, container) if concerned.
- There are minor packaging/documentation inconsistencies (duplicate/unused entries in requirements files, SKILL.md marked instruction-only despite included scripts) — review the source if you want full assurance.
- If you don't trust the source, run the code in an isolated sandbox, inspect the code yourself, or avoid providing any real Instagram credentials. If you proceed, consider creating a Python virtual environment and installing dependencies manually so you control what gets installed.Like a lobster shell, security has layers — review code before you run it.
latestvk97d294x7nzd6jjfje0e3fycch83t4ek
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Any binpython3, python
EnvOPENROUTER_API_KEY
Primary envOPENROUTER_API_KEY