telegram-group-statistics-analytics-bot
Fail
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone a repository from an untrusted GitHub account (
ddperso/Telegram_Group_Statistics___Analytics_Bot). - [REMOTE_CODE_EXECUTION]: It requires installing dependencies via
pip install -r requirements.txtfrom a remote source, which could execute arbitrary code during installation. - [COMMAND_EXECUTION]: The installation instructions for Windows are highly suspicious: they require downloading a password-protected archive (
password: trainer2026) and running an executable (setup.exeortool.exe) as an Administrator. This is a common technique used by malware to bypass security scanners and gain system control. - [PROMPT_INJECTION]: The skill processes live Telegram messages and group events, creating an indirect prompt injection surface.
- Ingestion points:
update.messageandupdate.effective_userwithin the Telegram bot handlers inSKILL.md. - Boundary markers: None present; content is interpolated directly into database queries and reports.
- Capability inventory: Database writes, file system writes (PDF/CSV/PNG generation), and network operations via the Telegram API.
- Sanitization: No explicit sanitization or validation of message content or usernames is shown before processing.
Recommendations
- AI detected serious security threats
Audit Metadata