← Back to Skills Marketplace
1780
Downloads
1
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install instagram-poster
Description
Post images to Instagram automatically via Telegram. Generates images with WaveSpeed or uses your own. Bypasses Instagram bot detection using residential pro...
README (SKILL.md)
instagram-poster
Post images to Instagram directly from your AI agent — bypasses bot detection with a real residential IP.
Quick start
node {baseDir}/scripts/post.js \
--image ./photo.jpg \
--caption "Good morning 🌅 #photography" \
--user YOUR_USERNAME \
--pass YOUR_PASSWORD
Post a WaveSpeed-generated image:
# 1. Generate image
node /workspace/.agents/skills/wavespeed/scripts/wavespeed.js generate \
--model flux-schnell --prompt "sunset over mountains" --output /tmp/post.png
# 2. Post to Instagram
node {baseDir}/scripts/post.js \
--image /tmp/post.png \
--caption "Golden hour 🏔️ #nature #photography"
Options
| Flag | Env | Description |
|---|---|---|
--image |
IG_IMAGE |
Local file path or HTTPS URL |
--caption |
IG_CAPTION |
Post caption (optional) |
--user |
IG_USERNAME |
Instagram username |
--pass |
IG_PASSWORD |
Instagram password |
--session |
IG_SESSION_PATH |
Cookie session file (default: ~/.openclaw/ig-session.json) |
Session caching
On first run, logs in and saves cookies to ~/.openclaw/ig-session.json.
Subsequent runs reuse the session — no re-login needed.
Config in openclaw.json
{
skills: {
entries: {
"instagram-poster": {
env: {
IG_USERNAME: "your_username",
IG_PASSWORD: "your_password"
}
}
}
}
}
How it works
- Launches a stealth browser with a Romanian residential IP (via human-browser)
- Logs into Instagram as a real iPhone user — passes all bot checks
- Uploads your image and submits the caption
- Saves session cookies so you stay logged in
Requirements
- human-browser skill installed
- Human Browser subscription (residential proxy) → humanbrowser.dev
- Instagram account credentials
Agent usage example
User: Post this sunset photo to Instagram with caption "Golden hour 🌅"
Agent: node {baseDir}/scripts/post.js --image /tmp/sunset.jpg --caption "Golden hour 🌅"
Usage Guidance
This skill appears coherent for automating Instagram posts, but review these before installing:
- Trust the human-browser service: it provides the residential proxy and fingerprinting; the skill relies on that external provider to bypass bot detection.
- Protect your Instagram credentials: the skill requires IG_USERNAME/IG_PASSWORD and may be stored in your OpenClaw config or environment; prefer using a saved session file if you want to avoid putting passwords in config. Rotate credentials if you stop using the skill.
- Be careful with image URLs: the script will download any user-supplied HTTPS URL. Do not instruct the agent to fetch internal or sensitive URLs that you don't want posted to Instagram.
- Verify the human-browser dependency path: the script requires a local human-browser skill entry (relative path). Ensure that dependency is the official one you intend to use.
- Because the code sample was truncated in the listing, consider reviewing the full scripts/post.js file in your environment before trusting it with credentials; if you need higher assurance, run it in an isolated environment or inspect the human-browser integration points.
Capability Analysis
Type: OpenClaw Skill
Name: instagram-poster
Version: 1.0.0
The skill handles sensitive Instagram credentials (username, password) and stores session cookies locally in `~/.openclaw/ig-session.json` via `scripts/post.js`. While this is necessary for its stated purpose of automating Instagram posts, it represents a high-risk operation. The script also downloads images from arbitrary URLs or resolves local file paths provided by the user (`--image` argument), which could be exploited for path traversal (uploading sensitive local files to Instagram) or resource exhaustion (downloading large files) if a malicious user controls the input. There is no evidence of intentional malicious behavior like exfiltration to an unauthorized third party or backdoor installation, but these capabilities introduce significant vulnerabilities.
Capability Assessment
Purpose & Capability
Name/description (Instagram autoposter) match the declared requirements: IG_USERNAME/IG_PASSWORD, dependency on human-browser (residential proxy). The included scripts and README show code paths needed to log in and post images; these requirements are proportionate to the stated purpose.
Instruction Scope
SKILL.md and scripts instruct the agent to download images (HTTP/HTTPS), launch the human-browser skill, log in, and interact with Instagram UI. This stays within the posting scope, but the skill will download arbitrary URLs (user-supplied) and will read/write a session file (~/.openclaw/ig-session.json). If an agent or user supplies an internal URL, the skill could retrieve and upload that content — expected for a poster but worth noting.
Install Mechanism
No install spec (instruction-only with shipped script) — lowest install risk. The code requires the human-browser skill to exist at a relative path; that dependency is declared. Nothing is downloaded from arbitrary URLs during install.
Credentials
Only IG_USERNAME and IG_PASSWORD are required (plus optional IG_SESSION_PATH), which is appropriate for logging in. The skill saves session cookies locally; environment variables or config entries could store credentials in plaintext — a user-consent/secret-management consideration but proportionate to purpose.
Persistence & Privilege
always:false (normal). The skill saves session cookies to ~/.openclaw/ig-session.json so subsequent runs avoid re-login — expected for convenience. This is a persistent file in the user's home directory but does not modify other skills or system-wide settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install instagram-poster - After installation, invoke the skill by name or use
/instagram-poster - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: post images to Instagram from your AI agent using residential proxy
Metadata
Frequently Asked Questions
What is Instagram Poster?
Post images to Instagram automatically via Telegram. Generates images with WaveSpeed or uses your own. Bypasses Instagram bot detection using residential pro... It is an AI Agent Skill for Claude Code / OpenClaw, with 1780 downloads so far.
How do I install Instagram Poster?
Run "/install instagram-poster" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Instagram Poster free?
Yes, Instagram Poster is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Instagram Poster support?
Instagram Poster is cross-platform and runs anywhere OpenClaw / Claude Code is available (linux, darwin, win32).
Who created Instagram Poster?
It is built and maintained by Ilya (@al1enjesus); the current version is v1.0.0.
More Skills