telegram-telethon

SUSPICIOUS. The Telegram capabilities and credential needs mostly match the stated purpose, and the install path is not a fake bootstrapper. However, the daemon’s automatic Codex spawning from untrusted Telegram messages, combined with broad agent tools and outbound replies, creates high prompt-injection and autonomous-action risk. This looks like a real Telegram automation skill with substantial security exposure, not confirmed malware.

No clear evidence of intentional malware, obfuscation, or backdoor behavior in this fragment. The code is a Telegram publishing utility that sends message content and optionally uploads local media files resolved from draft/frontmatter. The main security concern is abuse/exfiltration if an attacker can control drafts or draft_path: the function can cause upload of local files to Telegram. There is also some potential path containment weakness due to lack of explicit normalization/containment checks when joining user-controlled paths.