telegram-bot-builder
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides educational content and boilerplate code for Telegram bot development using well-established libraries such as Telegraf, grammY, python-telegram-bot, and aiogram. It correctly demonstrates the use of environment variables for handling sensitive tokens.
- [INDIRECT_PROMPT_INJECTION]: The snippets define ingestion points for untrusted user input via message and action handlers (e.g., bot.on('text')). While this is inherent to the skill's purpose, the provided examples lack boundary markers or explicit sanitization logic, which are recommended if the input is processed by an LLM.
Audit Metadata