Is InstaNote: Download and Save Video for IG safe?
Medium risk
InstaNote is medium risk. Downloading or saving Instagram content sends the current page URL and browser details to an Alibaba Cloud Logging endpoint, including URL/referrer context and tab-activity metadata tied to the action.
45Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
SeverityMEDIUM
ClassUNWANTED
TypeUnexpected
CWECWE-359
SourceAI SANDBOX
Instagram actions send page URL and browser details to Alibaba logging.
Downloading or saving Instagram content sends the current page URL and browser details to an Alibaba Cloud Logging endpoint, including URL/referrer context and tab-activity metadata tied to the action.
01EvidenceCAUSE EFFECT
What actually happens
You did this
The user clicks an extension action on Instagram or another supported page.
The extension did this
The extension includes the current page URL, referrer context, and browser details in a logging payload.
02EvidenceNETWORK CAPTURE
Captured request
POSThttps://nc-dn-us.us-west-1.log.aliyuncs.com/logstores/extensions/track
03EvidenceFIELD TABLE
Fields in the request
| Field | Value | Why it matters | |
|---|---|---|---|
Current page URL | https://www.instagram.com/reel/ABC123/ (illustrative) | Shows which Instagram or supported page was open when the extension action ran. | |
Referrer page | https://www.instagram.com/p/XYZ789/ (illustrative) | Provides page context that can identify the content or location associated with the action. | |
Tab activity context | ext_download_video_chrome (illustrative) | Connects the logged action to the browser tab and extension feature being used. |