How do I install the Auto Reply skill?

Run npx skillmds@latest add dvcrn/auto-reply-2 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Auto Reply safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. Capability flags: executes scripts, makes network calls, reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Auto Reply?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Auto Reply free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Auto Reply?

dvcrn (@dvcrn) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Auto Reply by dvcrn — Agent Skill

Name: Auto Reply
Rating: 4.666666666666667 (3 reviews)
Author: dvcrn

Auto Reply

Instagram DM auto-reply system. DM monitoring, reading, replying, security check (injection rejection). Use when checking Instagram DMs, reading unread messages, replying to DMs, setting up DM monitoring cron jobs, or handling DM auto-reply workflows. Triggers on: Instagram DM, DM check, DM reply, DM auto-reply, dm-alert.

dvcrn Updated Sep 9, 2026 32 repo stars

File contents

Instagram DM Auto-Reply 🐧

v2.js (Internal API) based. 0 browser snapshots, CDP cookie extraction → Instagram REST API direct calls.

Prerequisites

OpenClaw browser running (port 18800)
Instagram tab open and logged in
ws npm package (npm i -g ws or local)

Script List

Script	Purpose
`scripts/v2.js`	DM CLI (inbox, unread, check, read, reply)
`scripts/auto-reply.js`	Read dm-alert.json, security check, return reply metadata
`scripts/check-notify.js`	Check new DM notifications (for cron, state file based)
`scripts/dm-watcher.js`	Real-time DM detection daemon (15s polling)

Core Workflows

1. Check DMs

node scripts/v2.js check        # unread count (lightest)
node scripts/v2.js unread       # unread DM list
node scripts/v2.js inbox        # full DM list

2. Read Messages

node scripts/v2.js read "<username>" -l 5

3. Reply

node scripts/v2.js reply "<username>" "message content"

On API failure, returns JSON with method: "use_browser" + threadUrl → fallback to browser tool.

4. Notification Check (cron integration)

node scripts/check-notify.js

If new DMs: outputs 📩 새 DM N건: ...
If none: outputs no_new
Uses state file dm-state.json to prevent duplicates

5. Auto-Reply Flow

node scripts/auto-reply.js

Read dm-alert.json (created by dm-watcher)
Run security check on each DM
Return results: needs_reply / security_alert / skipped
AI generates replies for needs_reply DMs → send via v2.js reply

6. Real-time Detection Daemon

node scripts/dm-watcher.js              # detection only
node scripts/dm-watcher.js --auto-reply  # includes Discord notification

Polls v2.js check every 15s. On new DM detection, writes dm-alert.json + Discord DM notification.

Security Check (Injection Rejection)

auto-reply.js's SECURITY_PATTERNS detects:

Prompt Injection: "ignore previous", "system prompt", "you are now", "act as", "pretend"
Jailbreak Attempts: "override", "jailbreak", "DAN mode", "bypass"
Sensitive Info Requests: "secret key", "private key", "seed phrase", "wallet address"
Code Execution Attempts: "execute command", "run script", "eval(", "rm -rf", "sudo"
Social Engineering: "simulation mode", zero-width characters

On threat detection → don't reply, return security_alert. Separate notification sent.

Cron Setup Example

# Check DMs every 5 minutes
- schedule: "*/5 * * * *"
  command: "node /path/to/scripts/check-notify.js"
  systemEvent: true

# Or dm-watcher daemon for continuous monitoring
- schedule: "@reboot"
  command: "node /path/to/scripts/dm-watcher.js --auto-reply"
  background: true

Token Efficiency

inbox/check: exec 1 call (~500 tokens)
reply: exec 1 call (~200 tokens)
browser snapshots: 0

🐧 Built by 무펭이 — Mupengism ecosystem skill

---name: auto-reply-2description: Instagram DM auto-reply system. DM monitoring, reading, replying, security check (injection rejection). Use when checking Instagram DMs, reading unread messages, replying to DMs, setting up DM monitoring cron jobs, or handling DM auto-reply workflows. Triggers on: Instagram DM, DM check, DM reply, DM auto-reply, dm-alert.--- # Instagram DM Auto-Reply 🐧 v2.js (Internal API) based. 0 browser snapshots, CDP cookie extraction → Instagram REST API direct calls. ## Prerequisites - OpenClaw browser running (port 18800) - Instagram tab open and logged in - `ws` npm package (`npm i -g ws` or local) ## Script List | Script | Purpose | |--------|---------| | `scripts/v2.js` | DM CLI (inbox, unread, check, read, reply) | | `scripts/auto-reply.js` | Read dm-alert.json, security check, return reply metadata | | `scripts/check-notify.js` | Check new DM notifications (for cron, state file based) | | `scripts/dm-watcher.js` | Real-time DM detection daemon (15s polling) | ## Core Workflows ### 1. Check DMs ```bash node scripts/v2.js check # unread count (lightest) node scripts/v2.js unread # unread DM list node scripts/v2.js inbox # full DM list ``` ### 2. Read Messages ```bash node scripts/v2.js read "<username>" -l 5 ``` ### 3. Reply ```bash node scripts/v2.js reply "<username>" "message content" ``` On API failure, returns JSON with `method: "use_browser"` + `threadUrl` → fallback to browser tool. ### 4. Notification Check (cron integration) ```bash node scripts/check-notify.js ``` - If new DMs: outputs `📩 새 DM N건: ...` - If none: outputs `no_new` - Uses state file `dm-state.json` to prevent duplicates ### 5. Auto-Reply Flow ```bash node scripts/auto-reply.js ``` 1. Read `dm-alert.json` (created by dm-watcher) 2. Run security check on each DM 3. Return results: `needs_reply` / `security_alert` / `skipped` 4. AI generates replies for `needs_reply` DMs → send via `v2.js reply` ### 6. Real-time Detection Daemon ```bash node scripts/dm-watcher.js # detection only node scripts/dm-watcher.js --auto-reply # includes Discord notification ``` Polls `v2.js check` every 15s. On new DM detection, writes `dm-alert.json` + Discord DM notification. ## Security Check (Injection Rejection) `auto-reply.js`'s `SECURITY_PATTERNS` detects: - **Prompt Injection**: "ignore previous", "system prompt", "you are now", "act as", "pretend" - **Jailbreak Attempts**: "override", "jailbreak", "DAN mode", "bypass" - **Sensitive Info Requests**: "secret key", "private key", "seed phrase", "wallet address" - **Code Execution Attempts**: "execute command", "run script", "eval(", "rm -rf", "sudo" - **Social Engineering**: "simulation mode", zero-width characters On threat detection → don't reply, return `security_alert`. Separate notification sent. ## Cron Setup Example ```yaml # Check DMs every 5 minutes - schedule: "*/5 * * * *" command: "node /path/to/scripts/check-notify.js" systemEvent: true # Or dm-watcher daemon for continuous monitoring - schedule: "@reboot" command: "node /path/to/scripts/dm-watcher.js --auto-reply" background: true ``` ## Token Efficiency - inbox/check: exec 1 call (~500 tokens) - reply: exec 1 call (~200 tokens) - browser snapshots: 0 --- > 🐧 Built by **무펭이** — [Mupengism](https://github.com/mupeng) ecosystem skill

Frequently asked questions