add-telegram
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install 'grammy', which is a standard and well-known Telegram bot framework available via the official NPM registry.
- [COMMAND_EXECUTION]: Benign shell commands for project management (npm install), troubleshooting (curl), and service control (launchctl, systemctl) are provided to the user.
- [PROMPT_INJECTION]: While the skill creates an ingestion point for external user input via Telegram, it includes a prominent 'Security Warning' section that explicitly educates the user on the risks of unauthorized command execution in group chats and provides mitigation recommendations.
- [DATA_EXFILTRATION]: The skill promotes secure development practices by instructing the user to store sensitive bot tokens in a .env file rather than hardcoding them in source code.
Audit Metadata