telegram-contacts
Warn
Audited by Socket on May 20, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s stated purpose matches Telegram contact import/export/lookup features, and official Telegram APIs support this class of action. However, the only implementation is an unspecified local script with no verifiable provenance, installation source, or documented data handling, so the skill carries high trust risk despite limited evidence of overtly malicious behavior.
Confidence: 82%Severity: 72%
Audit Metadata