telegram-send
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: Accesses the local configuration file
~/.cli-jaw/settings.jsonto retrieve sensitive Telegram bot credentials (token and chat IDs). - [DATA_EXFILTRATION]: Transmits user-provided files and status messages to the official Telegram Bot API at
api.telegram.orgor a local helper service atlocalhost:3457. - [COMMAND_EXECUTION]: Employs
curlfor making network requests to both local and external APIs, andjqfor parsing JSON configuration data.
Audit Metadata