by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill behaves as described: it runs a headless browser (Playwright) to use sssinstagram.com and downloads the video file to a downloads folder. Before installing, ensure you have Node 18+, playwright-core installed in the runtime, and a Chromium-compatible binary available (set BROWSER_EXECUTABLE_PATH if the default path is wrong). Be aware the skill contacts a third-party downloader site (sssinstagram.com) and downloads media from URLs that site returns — if that site is compromised or mal...详细分析 ▾
✓ 用途与能力
Name/description match the included files: the Node script uses Playwright to open sssinstagram.com, submit an Instagram reel URL, and save a video file. Required runtime pieces (Node 18+, playwright-core, Chromium-compatible binary) are reasonable and documented in SKILL.md.
ℹ 指令范围
Runtime instructions and script are narrowly scoped to validating an Instagram reel URL, visiting sssinstagram.com, locating download links/buttons, and saving a video to a downloads folder. Note: the script performs network requests to sssinstagram.com and then downloads whichever hrefs that site exposes (CDNs or direct video links). This is expected for the task but means the skill will fetch content from third-party hosts returned by the downloader site.
✓ 安装机制
No install spec bundled; the skill is instruction + code only. It relies on runtime presence of Node, playwright-core, and a browser binary. There are no embedded downloads, URL installs, or extraction of remote archives in the skill bundle itself.
✓ 凭证需求
No sensitive credentials requested. Only optional env vars (OPENCLAW_WORKSPACE, REEL_DOWNLOAD_DIR, BROWSER_EXECUTABLE_PATH) are used and are proportional to file placement and browser selection.
✓ 持久化与权限
always is false and the skill doesn't modify other skills or system-wide configs. It writes downloaded media to a workspace downloads directory (configurable) and provides a cleanup script. Autonomous invocation is enabled by default (platform default) but not excessive here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/19
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install instagram-reel-downloader-whatsapp
镜像加速npx clawhub@latest install instagram-reel-downloader-whatsapp --registry https://cn.longxiaskill.com