revx-telegram
Fail
Audited by Snyk on Apr 29, 2026
Risk Level: HIGH
Full Analysis
HIGH W007: Insecure credential handling detected in skill instructions.
- Insecure credential handling detected (high risk: 1.00). The skill asks the user to copy their Telegram bot token and chat ID into the chat and then instructs the agent to run a CLI command embedding the token verbatim as a --token argument, which requires the LLM to handle and output a secret value directly.
Issues (1)
W007
HIGHInsecure credential handling detected in skill instructions.
Audit Metadata