telegram-bot-api-fundamentals
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation emphasizes bot token security, explicitly instructing users to never hardcode tokens or commit them to version control, recommending the use of environment variables like
process.env.BOT_TOKENinstead. - [EXTERNAL_DOWNLOADS]: The skill refers to the
agntdev/bot-startertemplate repository on GitHub for project initialization, which is an expected vendor resource provided by the author. - [SAFE]: Includes specific implementation examples for sanitizing untrusted user input using HTML and MarkdownV2 escape helpers, which mitigates potential formatting injection within the Telegram client UI.
- [COMMAND_EXECUTION]: Technical examples focus on interactions with the Telegram Bot API and framework-specific handlers; no arbitrary shell execution or suspicious system-level patterns were detected.
Audit Metadata