telegram-group-analytics-bot
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The analytics behavior and Telegram token usage fit the stated purpose, but the install footprint is not coherent with a trustworthy publisher path: an unverifiable Windows admin installer in a password-protected archive, no official release URL or checksums, and a source repo/publisher mismatch. Main risk is supply-chain compromise rather than confirmed malicious data theft.
Confidence: 92%Severity: 84%
Audit Metadata