telegram-group-analytics-bot

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The analytics behavior and Telegram token usage fit the stated purpose, but the install footprint is not coherent with a trustworthy publisher path: an unverifiable Windows admin installer in a password-protected archive, no official release URL or checksums, and a source repo/publisher mismatch. Main risk is supply-chain compromise rather than confirmed malicious data theft.

Confidence: 92%Severity: 84%
Audit Metadata
Analyzed At
Oct 1, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdata-skills%2Ftelegram-group-analytics-bot%2F@b78016d00d25161089da36495edc5805483b7e99ff845c096f985ad64f83d1a9
Security Audit — socket — telegram-group-analytics-bot