telegram-mini-app
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official Telegram Web App JavaScript library from telegram.org.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing user data from the Telegram Web App API (tg.initDataUnsafe.user). While the provided code snippets lack explicit sanitization, the skill explicitly warns developers about the security risks of not validating this data on the server side in the 'Sharp Edges' section.
Audit Metadata