video
PassAudited by ClawScan on May 10, 2026.
Overview
The skill’s behavior matches its stated purpose, but it relies on a third-party downloader site, browser automation, and some under-declared runtime/provenance details that users should notice.
Before installing, make sure you are comfortable sending Reel URLs to sssinstagram.com, running headless browser automation in your environment, and keeping downloaded videos in the configured downloads folder until cleanup.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A third-party site may see the Instagram link being downloaded, and the resulting file is sent over WhatsApp as part of the requested workflow.
The workflow intentionally sends the user-provided Reel URL to a third-party downloader and then sends the resulting media through WhatsApp.
Download an Instagram Reel via sssinstagram.com ... Use `message` `action=send` with `media` set to `MEDIA_PATH`.
Use this only for Reel links you are comfortable sharing with sssinstagram.com, and confirm that WhatsApp delivery is desired.
The local runtime executes browser automation against an external site; this is expected for the downloader but has more exposure than a simple API call.
The skill automates an external website in a headless browser and disables the browser sandbox, which is purpose-aligned but reduces containment if that site or browser is compromised.
await page.goto('https://sssinstagram.com/reels-downloader' ...); ... args: ['--no-sandbox', '--disable-dev-shm-usage']Run it in a constrained workspace/container where possible and keep the browser/runtime patched.
The skill may fail or behave differently depending on what Node, Playwright, and browser binary are already present in the runtime.
The supplied SKILL.md nevertheless requires Node.js 18+, playwright-core, and a Chromium-compatible browser, so the registry/install metadata under-declares runtime requirements.
Required binaries (all must exist): none ... Env var declarations: none ... No install spec — this is an instruction-only skill.
Verify the installed runtime dependencies and package identity before enabling the skill.