tg-widgets
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Provides a Python utility script
scripts/widget_tool.pydesigned to be executed by the developer or agent to validate widget constraints and deploy them to the Telegram platform. - [EXTERNAL_DOWNLOADS]: Interacts with the official Telegram Bot API endpoint (
api.telegram.org) to transmit widget data. This is a standard integration with a well-known service for the skill's stated purpose. - [CREDENTIALS_UNSAFE]: The
widget_tool.pyscript utilizes theTELEGRAM_BOT_TOKENenvironment variable for authentication. This follows industry best practices for secret management in CLI tools by avoiding hardcoded tokens and relying on environment-level configuration.
Audit Metadata