telegram-bot-api-fundamentals
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard bot development practices and emphasizes security measures.
- It instructs developers to use environment variables (
process.env.BOT_TOKEN) for sensitive credentials instead of hardcoding them. - It provides explicit sanitization logic (
escapeHtmlandescapeMd2) to prevent injection attacks when rendering user-generated content in Telegram clients. - All referenced external resources, such as the
agntdev/bot-startertemplate and the inlined toolkit, are consistent with the skill's established author context. - Communication is restricted to the well-known official Telegram Bot API domain (
api.telegram.org).
Audit Metadata