telegram

Warn

Audited by Socket on Sep 29, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's Telegram capabilities match its stated purpose, but it grants real-account messaging power and relies on an unpinned third-party GitHub install for the core CLI. Data flows are mostly coherent and guarded, so this is not confirmed malicious, but it carries meaningful supply-chain and real-world action risk.

Confidence: 88%Severity: 62%
Audit Metadata
Analyzed At
Sep 29, 2026, 10:22 AM
Package URL
pkg:socket/skills-sh/ruslan-korneev%2Ftg-kit%2Ftelegram%2F@eba79a26f15e8297bd53e951ae4ccec057e442de189eb38163db9473d2c5fc16