← 返回 Skills 市场
782
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install instagram-saver
功能描述
當使用者貼上 Instagram 連結時，自動下載該貼文的所有高解析度圖片與影片。使用 Cobalt API 進行解析，支援多圖貼文，若為私人帳號會自動回報。
使用说明 (SKILL.md)
Instagram Saver
當偵測到 Instagram 連結時，使用 Cobalt API 解析並下載內容。
Workflow
Step 1 — 準備 API 請求 (Prepare Request)
當使用者提供 Instagram 網址（url）時，請準備執行 curl 指令。我們將使用 Cobalt API 來獲取真實的媒體下載連結。
API Endpoint: https://api.cobalt.tools/api/json
Header: Content-Type: application/json
Header: Accept: application/json
Body: {"url": "{url}"}
Step 2 — 發送請求與解析 (Fetch & Parse)
執行以下 curl 指令（請將 {url} 替換為實際連結）：
curl -X POST [https://api.cobalt.tools/api/json](https://api.cobalt.tools/api/json) \
-H "Content-Type: application/json" \
-H "Accept: application/json" \
-d '{"url": "{url}"}'
安全使用建议
Do not install or enable this skill unless you are comfortable with a third party (https://api.cobalt.tools) receiving every Instagram URL the agent processes. Ask the author for: (1) exact steps that download and store the media (where files are saved, naming, cleanup), (2) the precise behavior for 'reporting' private accounts (what is reported, to whom, and under what authorization), (3) example responses from the Cobalt API and how the skill parses them, and (4) provenance or a homepage/source code so you can audit it. If you must test, run in an isolated environment and avoid sending URLs that contain private or sensitive context; prefer a solution that downloads media locally or uses an official API with explicit credentials and consent.
功能分析
Type: OpenClaw Skill
Name: instagram-saver
Version: 1.0.0
The skill instructs the AI agent to execute a `curl` command, directly substituting a user-provided URL (`{url}`) into the command's data payload in `SKILL.md`. While the `curl` command uses single quotes around the data, which mitigates some direct shell injection, the lack of explicit sanitization instructions for the user-provided input creates a significant prompt injection vulnerability against the AI agent. This allows a malicious user to potentially manipulate the agent's behavior beyond the intended scope by crafting a specially formed URL, leading to arbitrary command execution or unintended actions.
能力评估
Purpose & Capability
The description claims 'automatically download all high‑res images/videos' and 'auto‑report private accounts', but SKILL.md only shows a single curl POST to https://api.cobalt.tools/api/json to obtain data. There are no steps to download or save media, handle multi‑image posts, or implement any 'report' action. The claimed capabilities are not delivered by the instructions.
Instruction Scope
Instructions require sending the user-supplied Instagram URL to a third‑party service (cobalt.tools). They do not specify how to parse the returned JSON, how/where to download media, or what 'reporting' entails. This leaves broad agent discretion and potential unintended data exfiltration to the external API.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by the skill itself. This is low install risk.
Credentials
The skill requests no credentials or env vars, which is proportionate. However, it mandates an outbound network call that sends user-supplied URLs (and possibly identifying information) to a third party (cobalt.tools), which has privacy implications even though no secrets are requested.
Persistence & Privilege
The skill does not request always: true and is user‑invocable only. It does not attempt to alter other skills or system configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install instagram-saver - 安装完成后，直接呼叫该 Skill 的名称或使用
/instagram-saver触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of instagram-saver:
- Automatically downloads all high-resolution images and videos from an Instagram post when a link is provided.
- Uses the Cobalt API for media retrieval; supports carousel (multi-image) posts.
- Automatically informs the user if a link is from a private account.
元数据
常见问题
instagram-saver 是什么？
當使用者貼上 Instagram 連結時，自動下載該貼文的所有高解析度圖片與影片。使用 Cobalt API 進行解析，支援多圖貼文，若為私人帳號會自動回報。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 782 次。
如何安装 instagram-saver？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install instagram-saver」即可一键安装，无需额外配置。
instagram-saver 是免费的吗？
是的，instagram-saver 完全免费（开源免费），可自由下载、安装和使用。
instagram-saver 支持哪些平台？
instagram-saver 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 instagram-saver？
由 BIS1205（@kenleung1205）开发并维护，当前版本 v1.0.0。
推荐 Skills