Telegram Bot API
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive developer reference for the Telegram Bot API. All documented external network requests are directed to the official
api.telegram.orgdomain, which is the standard endpoint for Telegram bot operations. - [SAFE]: The skill implements security best practices by advising users never to expose bot tokens in logs or public output. It also includes instructions for securely managing these tokens in local configuration files (
~/Clawic/data/telegram-bot-api/). - [SAFE]: While the skill includes code snippets (Python, Node.js, and Bash/curl) for interacting with the API, these are static educational examples. There is no automated execution of remote scripts or dynamic code loading from untrusted sources.
- [SAFE]: The documentation covers standard integration methods such as Webhooks and Long Polling, providing examples for popular frameworks like Flask and Express. These examples follow official Telegram guidelines, including the use of secret tokens for webhook verification.
Audit Metadata