skills/codeh007/mtmskills/telegram-dm/Gen Agent Trust Hub

telegram-dm

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the well-known and reputable telethon Python library to interact with the Telegram API. Analysis of the scripts shows standard implementation patterns for Telegram client automation.
  • [SAFE]: Sensitive data, such as API IDs, API Hashes, and Telegram session files, are managed locally on the user's machine. The skill explicitly warns against sharing these credentials and uses secure input methods like getpass for 2FA passwords.
  • [SAFE]: The dynamic imports detected (importlib.import_module) in scripts/login_telethon.py and scripts/batch_send_telethon.py are used solely to verify that the telethon dependency is installed and to provide a clear error message to the user if it is missing. This is a common and benign practice for dependency management in standalone scripts.
  • [SAFE]: The skill does not perform any unexpected network operations. All network traffic is directed to official Telegram servers via the Telethon client. References to a local 'gomtm' server in documentation/backups are identified as architectural alternatives and do not pose a security risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 09:18 AM