use-telegram-serverless
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Telegram updates and Mini App endpoints. \n
- Ingestion points: The tgcloud/handlers/ and tgcloud/endpoints/ directories contain scripts that process external payloads from the Telegram Bot API. \n
- Boundary markers: The instructions explicitly advise using ctx.initData.user.id and ownership-based database filters to delimit user contexts. \n
- Capability inventory: The agent is instructed to use the tgcloud CLI for remote execution and deployment, and the sdk/fetch module for external network requests. \n
- Sanitization: The skill provides patterns for identifying and authorizing users, though it acknowledges that certain testing tools (tgcloud run) use synthetic contexts. \n- [COMMAND_EXECUTION]: The skill utilizes the @tgcloud/cli tool to perform operations such as pushing code to production, running remote sandbox tests, and executing database migrations. \n- [EXTERNAL_DOWNLOADS]: The skill references and fetches resources from official Telegram and NPM domains, which are recognized as well-known and trusted services for this workflow.
Audit Metadata