telegram-cli

SUSPICIOUS. The skill is largely coherent with its stated Telegram purpose and uses official Telegram/Telethon patterns, but it grants broad personal-account control, processes untrusted messages while able to act, and includes an autonomous A2A messaging carve-out. The biggest unresolved issue is missing install provenance for the core `tg` CLI in `references/setup.md`; without that file, trust in the main executable cannot be fully verified.