telegram-group-statistics-analytics-bot
Warn
Audited by Socket on Oct 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The analytics purpose is broadly coherent with Telegram data collection and reporting, but the installation footprint is not trustworthy: a password-protected archive, admin-level executable launch, missing repo provenance, and publisher/source mismatch make the delivery path disproportionate and unverifiable. The Python examples look normal, yet the unavailable repo and opaque Windows binary create substantial supply-chain risk.
Confidence: 94%Severity: 88%
Audit Metadata