telegram-automation

Warn

Audited by Socket on Oct 8, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill's Telegram capabilities fit its stated purpose, but its setup instructions are inconsistent with current official Composio MCP documentation and route actions/credentials through a managed hosted service rather than direct Telegram API use. This is not confirmed malware, but it carries medium security risk due to hosted-service trust, credential custody, and autonomous messaging actions.

Confidence: 84%Severity: 56%
Audit Metadata
Analyzed At
Oct 8, 2026, 08:59 PM
Package URL
pkg:socket/skills-sh/davepoon%2Fbuildwithclaude%2Ftelegram-automation%2F@b90d620494aade0789871066d907a02d8de6643c346c6d467295f416d091ee79