telegram-group-statistics-analytics-bot

Warn

Audited by Socket on Oct 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The analytics purpose is broadly coherent with Telegram data collection and reporting, but the installation footprint is not trustworthy: a password-protected archive, admin-level executable launch, missing repo provenance, and publisher/source mismatch make the delivery path disproportionate and unverifiable. The Python examples look normal, yet the unavailable repo and opaque Windows binary create substantial supply-chain risk.

Confidence: 94%Severity: 88%
Audit Metadata
Analyzed At
Oct 1, 2026, 01:37 PM
Package URL
pkg:socket/skills-sh/reason-machines%2Fdata-skills%2Ftelegram-group-statistics-analytics-bot%2F@6e52000d1d2fecc9bfa6a04e91a7df77eb8f671e75c58c7bf815fcd159fadb09
Security Audit — socket — telegram-group-statistics-analytics-bot