Skip to main content

instantly-cost-tuning

Optimizes Instantly costs through tier selection, usage monitoring, and budget alerts to reduce API expenses effectively.

Install this skill

or
7/100

Security score

The instantly-cost-tuning skill was audited on May 12, 2026 and we found 25 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 63

Template literal with variable interpolation in command context

SourceSKILL.md
63}>>(`/accounts/analytics/daily?start_date=${startDate}&end_date=${endDate}&emails=${accounts.map(a => a.email).join(",")}`);
medium line 87

Template literal with variable interpolation in command context

SourceSKILL.md
87console.log(`${account.email}: ${dailyAvg.toFixed(0)}/day of ${capacity} limit (${utilization.toFixed(0)}% utilized)`);
medium line 90

Template literal with variable interpolation in command context

SourceSKILL.md
90console.log(`\nOverall: ${totalSent} sent of ${totalCapacity} capacity (${((totalSent / totalCapacity) * 100).toFixed(0)}%)`);
medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md
91console.log(`Underutilized accounts (<20%): ${underutilized.length}`);
medium line 93

Template literal with variable interpolation in command context

SourceSKILL.md
93console.log(`Consider removing: ${underutilized.join(", ")}`);
medium line 115

Template literal with variable interpolation in command context

SourceSKILL.md
115}>(`/campaigns/analytics?id=${campaign.id}`);
medium line 129

Template literal with variable interpolation in command context

SourceSKILL.md
129console.log(`${analytics.campaign_name}`);
medium line 130

Template literal with variable interpolation in command context

SourceSKILL.md
130console.log(` Sent: ${analytics.emails_sent} | Open: ${openRate}% | Reply: ${replyRate}% | Bounce: ${bounceRate}%`);
medium line 131

Template literal with variable interpolation in command context

SourceSKILL.md
131console.log(` Est. cost/reply: $${costPerReply}`);
medium line 159

Template literal with variable interpolation in command context

SourceSKILL.md
159console.log(`Active accounts: ${accountCount}`);
medium line 160

Template literal with variable interpolation in command context

SourceSKILL.md
160console.log(`Uses webhooks: ${usesWebhooks}`);
medium line 170

Template literal with variable interpolation in command context

SourceSKILL.md
170console.log(` You have ${accountCount} accounts — need the 500+ tier.`);
medium line 195

Template literal with variable interpolation in command context

SourceSKILL.md
195console.log(`Consider removing inactive account: ${account.email}`);
medium line 204

Template literal with variable interpolation in command context

SourceSKILL.md
204console.log(`\nCompleted campaigns to archive: ${completed.length}`);
medium line 219

Template literal with variable interpolation in command context

SourceSKILL.md
219console.log(`\nBlock list entries: ${blocklist.length}+`);
medium line 33

Webhook reference - potential data exfiltration

SourceSKILL.md
33| Plan | Monthly | Annual (per mo) | Email Accounts | Warmup | API Access | Webhooks |
medium line 39

Webhook reference - potential data exfiltration

SourceSKILL.md
39**Key cost decision:** You need **Hypergrowth** ($97.95/mo) minimum for full API v2 access and webhooks.
low line 151

Webhook reference - potential data exfiltration

SourceSKILL.md
151const webhooks = await instantly<Array<{ id: string }>>(
low line 152

Webhook reference - potential data exfiltration

SourceSKILL.md
152"/webhooks?limit=50"
low line 156

Webhook reference - potential data exfiltration

SourceSKILL.md
156const usesWebhooks = webhooks.length > 0;
low line 160

Webhook reference - potential data exfiltration

SourceSKILL.md
160console.log(`Uses webhooks: ${usesWebhooks}`);
low line 162

Webhook reference - potential data exfiltration

SourceSKILL.md
162if (accountCount <= 5 && !usesWebhooks) {
low line 164

Webhook reference - potential data exfiltration

SourceSKILL.md
164console.log(" You're within the 5-account limit and don't need webhooks.");
low line 167

Webhook reference - potential data exfiltration

SourceSKILL.md
167console.log(" Full API v2 access, webhooks, and 25 accounts.");
low line 244

External URL reference

SourceSKILL.md
244- [Instantly Pricing](https://instantly.ai/pricing)
Scanned on May 12, 2026
View Security Dashboard
Installation guide →