tg-polls

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were identified in the skill content.
  • [EXTERNAL_DOWNLOADS]: The skill references official Telegram domains (api.telegram.org, core.telegram.org, and telegram.org) for documentation and API interactions. These are well-known services directly related to the skill's purpose.
  • [CREDENTIALS_UNSAFE]: Code examples correctly use a placeholder variable ($TOKEN) for API credentials, which is a recommended practice for preventing hardcoded secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for creating polls where user-supplied strings are interpolated into the poll question and options. While this presents an ingestion surface, the risk is negligible as it is restricted to standard messaging parameters and relies on official API limits.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 08:43 AM