tg-responder

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches reviewing and sending Telegram drafts, but the skill relies on an unverified local cross-skill sender script with undocumented provenance and hidden credential/network handling. The capability is broadly coherent, yet the transitive trust and lack of install/data-flow transparency make it higher risk than a self-contained benign documentation skill.

Confidence: 80%Severity: 58%
Audit Metadata
Analyzed At
May 19, 2026, 12:21 PM
Package URL
pkg:socket/skills-sh/glebis%2Fclaude-skills%2Ftg-responder%2F@62e3bdb95c0e79dd183d5f1bb5a475b4e2dd5133
Security Audit — socket — tg-responder