telegram

SUSPICIOUS. The skill’s Telegram-focused capabilities mostly align with its purpose, but it grants very broad authority over a real user account, includes arbitrary MTProto escape hatches, and processes untrusted message content while preserving action ability. The largest uncertainty is install trust: the actual `telegram-agent` distribution path is omitted here and public evidence shows naming/publisher mismatches, so the core CLI provenance is not verifiable from the supplied material.