telegram
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bundled Python script (
scripts/tg.py) using theBashtool to interact with the Telegram MTProto API. - [DATA_EXFILTRATION]: The skill accesses sensitive environmental variables (
TELEGRAM_API_ID,TELEGRAM_API_HASH,TELEGRAM_SESSION_STRING) required for Telegram authentication. The implementation includes explicit instructions and code logic to prevent these secrets from being logged or echoed. - [SAFE]: All write operations (sending messages, joining groups, deleting content) are gated behind a mandatory
--confirmflag. The agent is instructed to perform a dry-run first and obtain explicit user consent before re-running with the confirmation argument.
Audit Metadata