telegram-bot-builder
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as a comprehensive reference guide and code template library. It does not contain any executable scripts that run automatically or perform hidden actions.
- [SAFE]: Instructions correctly prioritize security by teaching developers to use environment variables for sensitive credentials (e.g., BOT_TOKEN, DATABASE_URL) and to validate Telegram webhook signatures using the
X-Telegram-Bot-Api-Secret-Tokenheader. - [SAFE]: All external libraries and services referenced (such as aiogram, grammY, Supabase, Redis, and OpenAI) are official, well-known, and widely used in the software development community.
- [SAFE]: The skill explicitly addresses and provides code for mitigating common security threats, including rate limiting via Redis, input length validation, and HTML sanitization for safe message rendering.
Audit Metadata