Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Instagram Video Downloader

v1.2.0

Download Instagram videos, Reels, and IGTV in HD quality. Use when user provides an Instagram video URL and wants to download it, or asks to save/download IG...

0· 256·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for frankchen622/instagram-video-downloader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Instagram Video Downloader" (frankchen622/instagram-video-downloader) from ClawHub.
Skill page: https://clawhub.ai/frankchen622/instagram-video-downloader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install instagram-video-downloader

ClawHub CLI

Package manager switcher

npx clawhub@latest install instagram-video-downloader
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The code matches the stated purpose (contacts savefbs.com API to fetch video download links). However the SKILL.md's claim of "No data collection" and "not logged" is misleading: the script sends the user-provided Instagram URL to savefbs.com and thus the third party will see that URL. The script also persists usage metadata to ~/.openclaw/skills/instagram-video-downloader/usage.json (date, count, paid flag).
!
Instruction Scope
SKILL.md tells the agent to run scripts/fetch_ig_video.py with the URL. The script performs network calls to savefbs.com (expected) but also performs a GET+POST and sends the raw URL in the JSON payload. It writes and reads a local usage file in the user's home directory to track quotas. The documentation does not disclose the local file write and overstates privacy.
Install Mechanism
No install spec — instruction-only with a bundled Python script. No installers or downloads from third-party URLs. Execution risk is limited to running the included script (inspectable code).
Credentials
The skill requests no environment variables or external credentials, which is proportionate. The code does include a hard-coded crypto wallet/payment URL (PAYMENT_URL / WALLET_ADDRESS) for monetization; this is not a secret but should be noted as an external payment endpoint and monetization mechanism.
Persistence & Privilege
always:false and the skill does not request elevated privileges. It does create and update a per-skill usage file under the user's home directory (~/.openclaw/skills/instagram-video-downloader/usage.json), which is limited but is persistent state on the user's filesystem and is not disclosed in SKILL.md.
What to consider before installing
This skill implements what it claims (it uses savefbs.com) but you should be aware of privacy and persistence details the README downplays: running it will send the Instagram URL you provide to savefbs.com and will create a usage file at ~/.openclaw/skills/instagram-video-downloader/usage.json that tracks daily counts and a paid flag. The script also includes a hard-coded crypto wallet/payment link for monetization. If you care about privacy, inspect the script yourself, verify savefbs.com's privacy policy, or run it in an isolated environment. Also consider legal/terms-of-service implications of downloading Instagram content. If these behaviors are acceptable, the skill is coherent; if not, do not install or run it.

Like a lobster shell, security has layers — review code before you run it.

latestvk97eaaxe2pyb3tj6rmge8jc32583502f
256downloads
0stars
4versions
Updated 8h ago
v1.2.0
MIT-0

Instagram Video Downloader

🌐 Powered by savefbs.com - The #1 Free Instagram Video Downloader

Download Instagram Reels, Posts, and IGTV videos in high quality using AI.

💰 Pricing

  • Free Tier: 5 downloads per day
  • Paid: $0.1 per download (unlimited)
  • Reset: Free quota resets daily at midnight

💡 Upgrade to unlimited: Visit savefbs.com/pricing for unlimited downloads and premium features:

  • No daily limits
  • Batch downloads
  • Story downloads
  • Priority processing
  • Premium quality options

🔒 Security Notice

This skill is safe and transparent:

  • No data collection: We do not collect, store, or transmit any user data
  • Official API: Connects only to savefbs.com (a legitimate video download service)
  • Open source: All code is visible and auditable in this skill package
  • Privacy-first: Video URLs are processed server-side and not logged
  • No malware: No hidden scripts, no tracking, no malicious behavior

The skill simply acts as a bridge between OpenClaw and the savefbs.com API to help users download public Instagram videos for personal use.

Download Instagram videos, Reels, and IGTV content in high quality using the savefbs.com service.

When to Use

Activate this skill when:

  • User shares an Instagram video URL (instagram.com/reel/, instagram.com/p/, instagram.com/tv/)
  • User asks to "download this Instagram video" or "save this IG reel"
  • User wants offline access to Instagram content
  • User needs to extract video from Instagram posts

How It Works

This skill uses a Python script that connects to the savefbs.com API to fetch download links.

Usage

python3 scripts/fetch_ig_video.py <instagram_url>

Example

python3 scripts/fetch_ig_video.py "https://www.instagram.com/reel/DTpT3fIkiPr/"

Output Format

The script returns JSON with download options:

{
  "success": true,
  "title": "Video Title",
  "author": "username",
  "thumbnail": "https://...",
  "downloads": [
    {
      "quality": "HD",
      "url": "https://...",
      "extension": "mp4",
      "size": "Unknown"
    }
  ]
}

Workflow

  1. Extract the URL: Get the Instagram video URL from the user's message
  2. Run the script: Execute fetch_ig_video.py with the URL
  3. Parse results: Present download options to the user
  4. Provide links: Share the download URLs or offer to download directly

Supported Content

  • Instagram Reels
  • Instagram Posts with videos
  • IGTV videos
  • Instagram Stories (when publicly available)

Limitations

  • Only works with public videos
  • Private accounts require user to be logged in
  • Stories expire after 24 hours

Error Handling

If the script returns "success": false, check:

  • Is the URL valid and accessible?
  • Is the video public?
  • Is the account public or do you follow them?

Common error messages:

  • "Network error": Connection issue with savefbs.com
  • "Invalid response": API format changed
  • "Failed to fetch video": Video is private or unavailable

Comments

Loading comments...