Instagram Analyzer

ReviewAudited by ClawScan on May 10, 2026.

Overview

This appears to be a disclosed Instagram scraping and analytics tool, but it uses browser automation, optional Instagram credentials, and dependency setup details that users should review before use.

Before installing, review the complete script, be cautious with Instagram credentials, and use conservative scraping settings. The documented local exports are expected, but avoid using the tool in ways that could violate account or platform rules.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may cause Instagram account friction, rate limits, or policy violations if used aggressively or with multiple accounts.

Why it was flagged

The skill openly describes automated browser scraping with stealth/human-behavior settings and suggests multiple accounts for rate limiting. This is related to the stated scraping purpose, but it may increase account or platform-policy risk.

Skill content
Browser simulation with Playwright ... Stealth mode (human behavior) ... Rate Limiting ... Use multiple accounts
Recommendation

Use conservative limits, avoid multi-account evasion unless you understand the consequences, and confirm the automation is acceptable for your use case.

What this means

Entering Instagram credentials gives the skill access to an account session and could put that account at risk if credentials are mishandled.

Why it was flagged

The skill may ask for Instagram credentials for fuller metrics. This is purpose-aligned, but the registry metadata declares no primary credential or required environment variables, so credential handling is not clearly specified.

Skill content
Some metrics require login (view count, saves) - Configure Instagram credentials in `.env`
Recommendation

Avoid using your main account password unless necessary; prefer a dedicated account, review the full script, and ensure credentials are stored only locally and not logged or shared.

What this means

Installation may require manual dependency setup, and users may not see all required components from the registry metadata alone.

Why it was flagged

The skill documentation lists runtime dependencies, but the registry section says there is no install spec and no required binaries. This is not malicious, but dependency setup is under-declared in the registry metadata.

Skill content
requires:\n      bins:\n        - python3\n        - chromium\n      pip:\n        - playwright\n        - beautifulsoup4\n        - lxml
Recommendation

Install dependencies from trusted sources, review requirements.txt, and verify the complete script before running it.