ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Instagram Reel Downloader (WhatsApp)

v1.0.1

Download an Instagram Reel via sssinstagram.com and return it as a WhatsApp-ready video file. Use when a reel URL is provided and yt-dlp is blocked or not pr...

⭐ 0· 764·0 current·1 all-time
bySaif@besaif
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included files: the Node script uses Playwright to open sssinstagram.com, submit an Instagram reel URL, and save a video file. Required runtime pieces (Node 18+, playwright-core, Chromium-compatible binary) are reasonable and documented in SKILL.md.
ℹ
Instruction Scope
Runtime instructions and script are narrowly scoped to validating an Instagram reel URL, visiting sssinstagram.com, locating download links/buttons, and saving a video to a downloads folder. Note: the script performs network requests to sssinstagram.com and then downloads whichever hrefs that site exposes (CDNs or direct video links). This is expected for the task but means the skill will fetch content from third-party hosts returned by the downloader site.
✓
Install Mechanism
No install spec bundled; the skill is instruction + code only. It relies on runtime presence of Node, playwright-core, and a browser binary. There are no embedded downloads, URL installs, or extraction of remote archives in the skill bundle itself.
✓
Credentials
No sensitive credentials requested. Only optional env vars (OPENCLAW_WORKSPACE, REEL_DOWNLOAD_DIR, BROWSER_EXECUTABLE_PATH) are used and are proportional to file placement and browser selection.
✓
Persistence & Privilege
always is false and the skill doesn't modify other skills or system-wide configs. It writes downloaded media to a workspace downloads directory (configurable) and provides a cleanup script. Autonomous invocation is enabled by default (platform default) but not excessive here.
Assessment
This skill behaves as described: it runs a headless browser (Playwright) to use sssinstagram.com and downloads the video file to a downloads folder. Before installing, ensure you have Node 18+, playwright-core installed in the runtime, and a Chromium-compatible binary available (set BROWSER_EXECUTABLE_PATH if the default path is wrong). Be aware the skill contacts a third-party downloader site (sssinstagram.com) and downloads media from URLs that site returns — if that site is compromised or malicious it could cause you to fetch unexpected content. The skill does not request secrets, but it will write files to the workspace; consider running it in an isolated environment and periodically running the provided cleanup script. If you don't want the agent to run this autonomously, disable or restrict autonomous invocation on the platform side.

Like a lobster shell, security has layers — review code before you run it.

latestvk975wf8by5yyny6whe3s4x888h81f1g3
764downloads
0stars
2versions
Updated 3h ago
v1.0.1
MIT-0
Saif@besaif
latest
Download

Instagram Reel via sssinstagram

Requirements

  • Node.js 18+.
  • playwright-core installed in the runtime.
  • Chromium-compatible browser binary available via:
    • BROWSER_EXECUTABLE_PATH (preferred), or
    • default /usr/bin/brave-browser.

Environment variables

  • OPENCLAW_WORKSPACE (optional): workspace root used for output path.
  • REEL_DOWNLOAD_DIR (optional): explicit download directory override.
  • BROWSER_EXECUTABLE_PATH (optional): browser binary path override.

  1. Validate input URL.

    • Accept only https://www.instagram.com/reel/... (or /reels/...) links.

  2. Run downloader automation script.

    • Execute:
      • node scripts/download_via_sss.mjs "<instagram-url>"
    • On success it prints:
      • MEDIA_PATH=<absolute path>

  3. Send the file to user on WhatsApp.

    • Use message action=send with media set to MEDIA_PATH.
    • Add a small caption like Done 🐾.

  4. If the site blocks automation.

    • Retry once after a short wait.
    • If it still fails, report failure cleanly and ask user for another link.

Notes

  • Uses BROWSER_EXECUTABLE_PATH if set, otherwise defaults to /usr/bin/brave-browser.
  • Saves videos to REEL_DOWNLOAD_DIR when set, else <workspace>/downloads (OPENCLAW_WORKSPACE or current working directory).
  • Uses Playwright (playwright-core) in headless mode.
  • Optional cleanup script: bash scripts/cleanup_reels.sh 30 (minutes to retain, default 30).
  • For user privacy, do not store links longer than needed for the download run.

Comments

Loading comments...