israeli-telegram-business-bot
Warn
Audited by Snyk on Oct 3, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (medium risk: 0.30). The required workflow involves setting up and configuring a Telegram business bot, which processes incoming messages and user interactions from external customers via Telegram APIs.
MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).
- Direct money access detected (high risk: 0.70). The skill guides setting up payment links, billing options, and gateway integrations (Green Invoice, Rivhit, PayMe, iCount, Meshulam, Tranzila, Bit) within a Telegram business bot. These payment links and integrations handle direct financial charges/purchases. No independent access controls or payment authentication mechanisms are enforced by the skill or service layer for these payment routes. Therefore, the operation is direct without qualifying independent control.
Issues (2)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
W009
MEDIUMDirect money access capability detected (payment gateways, crypto, banking).
Audit Metadata