telegram-setup
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local binary at
../telegram-skills-bin/bin/telegramto perform the interactive setup. This binary is part of the vendor's toolset. - [CREDENTIALS_UNSAFE]: The skill manages Telegram bot tokens. It follows standard security practices by allowing the user to provide the token via command-line arguments or by storing it in a local configuration file at
~/.config/telegram-skills/credentials.json. - [EXTERNAL_DOWNLOADS]: The skill recommends installing a sibling dependency (
roziscoding/telegram-skills) if the required binary is missing, which is a legitimate vendor resource.
Audit Metadata