tg-responder
Warn
Audited by Socket on May 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches reviewing and sending Telegram drafts, but the skill relies on an unverified local cross-skill sender script with undocumented provenance and hidden credential/network handling. The capability is broadly coherent, yet the transitive trust and lack of install/data-flow transparency make it higher risk than a self-contained benign documentation skill.
Confidence: 80%Severity: 58%
Audit Metadata