telegram-cli

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly instructs running a CLI login with the user's one-time code and optional 2FA password (tg login --code [--password <2FA>]) after the user reports them, which requires embedding secret values verbatim into commands/outputs.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/tg, the runtime path cmd_read/cmd_search uses Telethon (client.iter_messages(...)) to ingest message text/sender_name from arbitrary Telegram chats/search results that can be authored by outsiders, and that free text is directly printed or JSON output by the CLI.