telegram-group-statistics-analytics-bot

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 1.00). The presence of instructions to download a password‑protected archive and run Windows executables (setup.exe / tool.exe) from an unknown GitHub repository (ddperso) — combined with an unfamiliar site (ara.so) being listed as the skill author — are classic high‑risk indicators of malware distribution (my.telegram.org itself is legitimate but not relevant to the risky installer instructions).

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill ingests outsider-authored free text from Telegram group messages at runtime via MessageHandler(filters.ALL, track_message), where update.message (including message content) is processed and stored/used for statistics and reports, so non-user-authored message text can enter the agent/LLM context indirectly through generated report text/captions.