telegram-dev
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as an educational resource and technical guide for Telegram development. It includes well-documented code examples for Python and JavaScript.
- [SAFE]: Hardcoded placeholders for API tokens and database keys (e.g., 'your_token', 'changeme1234') are clearly intended for user replacement and do not pose a credential exposure risk.
- [EXTERNAL_DOWNLOADS]: The skill references official Telegram GitHub repositories and domains (e.g., core.telegram.org, github.com/tdlib/telegram-bot-api), which are well-known and trusted services for this context.
- [INDIRECT_PROMPT_INJECTION]: The skill provides examples for handling user-supplied message text via the Telegram Bot API. While this introduces an attack surface for the resulting bot, the skill correctly advises on data validation as a best practice in the 'Security Considerations' sections.
Audit Metadata