📦

instagram-api

Name: instagram-api
Author: fetcher-sh

Révision du contenu r1 Risque élevé 📁 Accès au système de fichiers🌐 Accès réseau🔑 Variables d’environnement⚙️ Commandes externes

Retrieve Public Instagram Data by API

Instagram data collection can require Meta approval, browser automation, or separate scraping infrastructure. This skill provides paid, read-only REST and MCP access to public Instagram data.

Prend en charge: Claude Codex Code(CC)

⚠️ 38 Médiocre

Maintain this Skill? Claim it ⚠️ 38 Médiocre

Arrêtez-vous et demandez confirmation avant l’installation.

Examinez le plan et obtenez le consentement explicite de l’utilisateur avant de modifier des fichiers.

Installer avec mon Agent

Copiez cette demande dans votre Agent. Elle contient la page Skill de référence et le manifeste.

Demande d’agent

Review the Skillstore skill "instagram-api" from https://skillstore.io/skills/fetcher-sh-instagram-api.md and its manifest at https://skillstore.io/api/skills/fetcher-sh-instagram-api/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Votre Agent doit toujours présenter son plan et demander toute confirmation exigée par la politique de sécurité.

Ressources lisibles par les agents

Utilisez ces liens lorsqu’un Agent IA, un crawler ou un script a besoin d’un contexte propre au lieu de lire toute la page.

Détail Markdown GET /skills/fetcher-sh-instagram-api.md manifest signé GET /api/skills/fetcher-sh-instagram-api/manifest lockfile signé GET /api/skills/fetcher-sh-instagram-api/lockfile

Tester

Utilisation de « instagram-api ». Which endpoint retrieves active stories for a public profile?

Résultat attendu:

First resolve the handle to a numeric user identifier. Then request active stories for that identifier. Historical stories are not available.

Utilisation de « instagram-api ». Plan a daily hashtag monitor with a fixed budget.

Résultat attendu:

Set a daily request and spending limit.
Store seen post identifiers and the latest cursor.
Poll on schedule and stop when either limit is reached.

Utilisation de « instagram-api ». I have an Instagram post link. Retrieve its public details.

Résultat attendu:

Extract the shortcode from the link, request the matching public post, and summarize available metadata without downloading media files.

Audit de sécurité

Risque élevé

v1 • 14/08/2026 Ouvrir le rapport versionné

All 161 static findings are false positives caused by Markdown links, formatting, documented URLs, placeholder credentials, and intended authentication examples. No prompt injection or unauthorized secret collection was found. However, paid actions can incur unbounded, nonrefundable charges without an explicit confirmation requirement.

Fichiers analysés

672

Lignes analysées

Éléments à examiner

Faux positifs ignorés

Préoccupations de sécurité confirmées (1)

Élevé

SKILL.md:199-212

Unbounded paid actions can create nonrefundable charges

The skill exposes paid data and credit top-up actions, states no rate limits, and warns that upstream failures are not refunded.

The documented MCP tools include paid data and credit top-up actions, while the same section states there are no rate limits or upstream-failure refunds.

Facteurs de risque

📁 Accès au système de fichiers (10)

references/endpoints.md:10 references/faq.md:20 references/faq.md:92 references/scenarios.md:16 SKILL.md:66 SKILL.md:202 SKILL.md:221 SKILL.md:222 SKILL.md:223 SKILL.md:227

🌐 Accès réseau (43)

🔑 Variables d’environnement (37)

⚙️ Commandes externes (50)

Audité par: codex

Partager et citer ce rapport

Partagez le rapport d’évaluation versionné, le badge neutre, la carte intégrable et les citations. Skillstore présente les preuves sans décider si ce Skill est sûr.

Ouvrir le rapport versionné

Copier le lien du rapport

https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/fetcher-sh-instagram-api/security.svg)](https://skillstore.io/skills/fetcher-sh-instagram-api?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/fetcher-sh-instagram-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/fetcher-sh-instagram-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Carte intégrable

<iframe src="https://skillstore.io/embed/skills/fetcher-sh-instagram-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citations académiques (APA · BibTeX · CFF)

Citation APA

fetcher-sh. (2026). instagram-api security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1

Citation BibTeX

@techreport{fetcher-sh-fetcher-sh-instagram-api-2026,
  author = {fetcher-sh},
  title = {instagram-api security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "instagram-api security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "fetcher-sh"
date-released: "2026-08-14"
url: "https://skillstore.io/skills/fetcher-sh-instagram-api/audits/1"
identifiers:
  - type: other
    value: "skillstore:fetcher-sh-instagram-api:audit:1"
    description: "Skillstore immutable audit report identifier"

Score Skillstore

Pourquoi ce score Niveau de confiance des preuves: Moyen

Architecture

Maintenabilité

Contenu

Communauté

Conformité aux spécifications

Ce que vous pouvez créer

Monitor Competitor Content

Track public posts, reels, hashtags, and engagement signals for selected accounts.

Build Instagram Data Pipelines

Collect paginated public profile and content data for internal analysis and reporting.

Discover Public Creators

Search profiles and compare public follower, biography, content, and topic signals.

Essayez ces prompts

Profile Lookup

Look up the public Instagram profile for @{handle}. Summarize the biography, follower count, following count, and numeric user identifier.

Bonnes pratiques

Confirm that target data is public and collection complies with platform terms, privacy rules, and local law.
Set request and spending limits before polling or pagination.
Keep Bearer keys in environment variables and redact them from prompts, logs, and outputs.

Éviter

Do not attempt to retrieve private content or bypass access controls.
Do not run unbounded follower exports, polling loops, or paid requests.
Do not assume response fields remain stable without checking current API output.