telegram
Warn
Audited by Socket on Sep 29, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the skill's Telegram capabilities match its stated purpose, but it grants real-account messaging power and relies on an unpinned third-party GitHub install for the core CLI. Data flows are mostly coherent and guarded, so this is not confirmed malicious, but it carries meaningful supply-chain and real-world action risk.
Confidence: 88%Severity: 62%
Audit Metadata