📦

instagram-api

Name: instagram-api
Author: fetcher-sh

Revisión del contenido r1 Riesgo alto 📁 Acceso al sistema de archivos🌐 Acceso a red🔑 Variables de entorno⚙️ Comandos externos

Retrieve Public Instagram Data by API

Instagram data collection can require Meta approval, browser automation, or separate scraping infrastructure. This skill provides paid, read-only REST and MCP access to public Instagram data.

Compatible con: Claude Codex Code(CC)

⚠️ 38 Deficiente

Detente y solicita confirmación antes de instalar.

Revisa el plan y obtén el consentimiento explícito del usuario antes de modificar archivos.

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "instagram-api" from https://skillstore.io/skills/fetcher-sh-instagram-api.md and its manifest at https://skillstore.io/api/skills/fetcher-sh-instagram-api/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/fetcher-sh-instagram-api.md Manifest firmado GET /api/skills/fetcher-sh-instagram-api/manifest Lockfile firmado GET /api/skills/fetcher-sh-instagram-api/lockfile

Pruébalo

Usando "instagram-api". Which endpoint retrieves active stories for a public profile?

Resultado esperado:

First resolve the handle to a numeric user identifier. Then request active stories for that identifier. Historical stories are not available.

Usando "instagram-api". Plan a daily hashtag monitor with a fixed budget.

Resultado esperado:

Set a daily request and spending limit.
Store seen post identifiers and the latest cursor.
Poll on schedule and stop when either limit is reached.

Usando "instagram-api". I have an Instagram post link. Retrieve its public details.

Resultado esperado:

Extract the shortcode from the link, request the matching public post, and summarize available metadata without downloading media files.

Auditoría de seguridad

Riesgo alto

v1 • 14/8/2026 Abrir el informe versionado

All 161 static findings are false positives caused by Markdown links, formatting, documented URLs, placeholder credentials, and intended authentication examples. No prompt injection or unauthorized secret collection was found. However, paid actions can incur unbounded, nonrefundable charges without an explicit confirmation requirement.

Archivos escaneados

672

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Alto

SKILL.md:199-212

Unbounded paid actions can create nonrefundable charges

The skill exposes paid data and credit top-up actions, states no rate limits, and warns that upstream failures are not refunded.

The documented MCP tools include paid data and credit top-up actions, while the same section states there are no rate limits or upstream-failure refunds.

Factores de riesgo

📁 Acceso al sistema de archivos (10)

references/endpoints.md:10 references/faq.md:20 references/faq.md:92 references/scenarios.md:16 SKILL.md:66 SKILL.md:202 SKILL.md:221 SKILL.md:222 SKILL.md:223 SKILL.md:227

🌐 Acceso a red (43)

🔑 Variables de entorno (37)

⚙️ Comandos externos (50)

Auditado por: codex

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/fetcher-sh-instagram-api/security.svg)](https://skillstore.io/skills/fetcher-sh-instagram-api?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/fetcher-sh-instagram-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fetcher-sh-instagram-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/fetcher-sh-instagram-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

fetcher-sh. (2026). instagram-api security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1

Cita BibTeX

@techreport{fetcher-sh-fetcher-sh-instagram-api-2026,
  author = {fetcher-sh},
  title = {instagram-api security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "instagram-api security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "fetcher-sh"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1"
identifiers:
  - type: other
    value: "skillstore:fetcher-sh-instagram-api:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Monitor Competitor Content

Track public posts, reels, hashtags, and engagement signals for selected accounts.

Build Instagram Data Pipelines

Collect paginated public profile and content data for internal analysis and reporting.

Discover Public Creators

Search profiles and compare public follower, biography, content, and topic signals.

Prueba estos prompts

Profile Lookup

Look up the public Instagram profile for @{handle}. Summarize the biography, follower count, following count, and numeric user identifier.

Mejores prácticas

Confirm that target data is public and collection complies with platform terms, privacy rules, and local law.
Set request and spending limits before polling or pagination.
Keep Bearer keys in environment variables and redact them from prompts, logs, and outputs.

Evitar

Do not attempt to retrieve private content or bypass access controls.
Do not run unbounded follower exports, polling loops, or paid requests.
Do not assume response fields remain stable without checking current API output.