telegram-contacts

Warn

Audited by Socket on May 20, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s stated purpose matches Telegram contact import/export/lookup features, and official Telegram APIs support this class of action. However, the only implementation is an unspecified local script with no verifiable provenance, installation source, or documented data handling, so the skill carries high trust risk despite limited evidence of overtly malicious behavior.

Confidence: 82%Severity: 72%
Audit Metadata
Analyzed At
May 20, 2026, 02:07 PM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fclaude-code-skills%2Ftelegram-contacts%2F@d5ee7f619b3a6fee128ccc9e0454c81130f4775a
Security Audit — socket — telegram-contacts