jobsearch-telegram

SUSPICIOUS: The core Telegram integration and data flow are consistent with the stated purpose, and there is no obvious malicious installer or third-party credential proxy. However, the skill is high-impact: it stores raw bot credentials locally, polls and processes untrusted external content, has broad execution/browser permissions, and can carry out real-world job-application actions. The footprint is mostly coherent for an automated job-search assistant, but the combination of broad tools, headless looping, and autonomous web actions makes it medium-high security risk rather than benign.