telegram-automation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from Telegram users, which could contain instructions intended to manipulate the agent.\n
- Ingestion points: The skill utilizes
TELEGRAM_GET_UPDATESandTELEGRAM_GET_CHAT_HISTORYto read messages from external chats.\n - Boundary markers: There are no instructions for using delimiters or specific warnings to ignore instructions embedded in the chat data.\n
- Capability inventory: The agent is granted capabilities to send, edit, and delete messages, as well as manage bot commands through tools like
TELEGRAM_SEND_MESSAGEandTELEGRAM_SET_MY_COMMANDS.\n - Sanitization: No security-focused sanitization or filtering of incoming data is mentioned to prevent instruction leakage into the agent prompt.\n- [EXTERNAL_DOWNLOADS]: The skill relies on an external service endpoint for its core functionality.\n
- The setup requires adding
https://rube.app/mcpas an MCP server to the agent configuration.
Audit Metadata