telegram-mini-apps
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions and boilerplate for processing untrusted external data from Telegram users via
initDataand user-provided inputs in UI components. - Ingestion points:
SKILL.mddescribes ingesting data viaTelegram.WebApp.initData,initDataUnsafe.user, and interactive UI components likeSelectorInputin React components. - Boundary markers: The skill explicitly documents that
initDataUnsafeis for display only and provides a robust HMAC-based signature validation method for backend authentication as a security boundary. - Capability inventory: The provided code snippets include capabilities for reading/writing to
CloudStorage,DeviceStorage, and making authenticated network requests to a backend API (Kotlin controller examples). - Sanitization: The backend implementation example (
TelegramAuthService) implements HMAC-SHA256 signature verification and timestamp-based expiry checks to ensure data integrity and prevent replay attacks. - [EXTERNAL_DOWNLOADS]: The skill references standard development packages and official documentation for the Telegram platform.
- Evidence: Instructions include installing packages such as
@telegram-apps/sdk,@telegram-apps/sdk-react, and@telegram-apps/uivia npm. - Evidence: The skill links to official resources at
core.telegram.organd established community documentation.
Audit Metadata