tg-responder

SUSPICIOUS: the skill is purpose-aligned as a Telegram workflow tool, but it can send external messages and automate follow-ups on the user's behalf, which creates meaningful real-world action risk. No clear malware or credential-harvesting behavior is visible, and no third-party exfiltration endpoint is shown; the main concerns are outbound messaging autonomy and partial trust in another local Telegram delivery script.