grammy
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Secret Management: The bot management scripts (bin/bot-config.ts, bin/webhook-setup.ts) implement secure handling of the bot token and webhook secrets by loading them from environment variables via dotenv from local .env or .dev.vars files.\n- [SAFE]: Authorized Communication: All network operations are conducted against the official api.telegram.org domain for Telegram Bot API interactions, ensuring data is sent to legitimate endpoints.\n- [SAFE]: Verified Ecosystem: The skill references official @grammyjs ecosystem packages and standard development utilities (yaml, tsx, dotenv) without any suspicious remote code execution or unverified dependencies.
Audit Metadata