tg-rich-messages

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill documents and demonstrates how to transmit message content and local media files to the official Telegram Bot API (api.telegram.org). This functionality is the primary intended purpose of the skill and utilizes standard, well-documented API patterns.\n- [EXTERNAL_DOWNLOADS]: Python examples in the skill reference the httpx library, which is a standard, reputable third-party package for HTTP communication.\n- [COMMAND_EXECUTION]: The skill includes informational curl commands as examples for developers to manually test and verify interactions with the Telegram API endpoints.\n- [SAFE]: The skill correctly promotes the use of environment variables (TELEGRAM_BOT_TOKEN) for managing sensitive bot credentials, avoiding the risk of hardcoded secrets in the implementation code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 02:01 AM
Security Audit — agent-trust-hub — tg-rich-messages