telegram-dm
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the well-known and reputable
telethonPython library to interact with the Telegram API. Analysis of the scripts shows standard implementation patterns for Telegram client automation. - [SAFE]: Sensitive data, such as API IDs, API Hashes, and Telegram session files, are managed locally on the user's machine. The skill explicitly warns against sharing these credentials and uses secure input methods like
getpassfor 2FA passwords. - [SAFE]: The dynamic imports detected (
importlib.import_module) inscripts/login_telethon.pyandscripts/batch_send_telethon.pyare used solely to verify that thetelethondependency is installed and to provide a clear error message to the user if it is missing. This is a common and benign practice for dependency management in standalone scripts. - [SAFE]: The skill does not perform any unexpected network operations. All network traffic is directed to official Telegram servers via the Telethon client. References to a local 'gomtm' server in documentation/backups are identified as architectural alternatives and do not pose a security risk.
Audit Metadata