telegram-automation

Warn

Audited by Socket on Oct 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the core Telegram capabilities match the stated purpose, and the required bot token is proportionate, but the skill relies on a discontinued Rube/Composio MCP path with outdated meta-tool names and stale tool references. Data flows through Composio-managed infrastructure rather than directly from the agent to Telegram, which is coherent for an MCP integration but introduces third-party trust and version-drift risk.

Confidence: 88%Severity: 58%
Audit Metadata
Analyzed At
Oct 24, 2026, 08:22 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fagentic-awesome-skills%2Ftelegram-automation%2F@0a7fc745e37ea631412f3c3ceba0808a2b2fd353