Instagram Analyzer

• Analyzed: May 12, 2026, 3:52 AM
• Findings: 1
• Version: 1.0.0
• Hash: 30cb720ec8656bf27e19ea7b4580ff2431b6c39a3a0a0a00538e14126d0fffcd
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as suspicious due to multiple vulnerabilities. The `scripts/instagram_analyzer.py` script is vulnerable to path traversal, as user-supplied usernames are directly used in constructing output file paths (e.g., `data/profiles/{username}_{timestamp}.json`), allowing arbitrary file writes. Additionally, Instagram credentials configured in `config/analyzer_config.json` are loaded into memory but never used for login, exposing sensitive data unnecessarily. The script also navigates to user-supplied URLs via Playwright, which could be exploited for browser-based attacks or internal network scanning.