The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides example curl commands for configuring Telegram webhooks. These commands target the official api.telegram.org endpoint and are intended for manual setup by the developer.
[PRIVILEGE_ESCALATION]: Deployment documentation includes a systemd service configuration template which involves using sudo for service management. This is standard procedure for hosting bots on VPS environments.
[CREDENTIALS_UNSAFE]: The skill mentions Telegram Bot tokens as a requirement. However, it explicitly instructs users to avoid committing tokens to version control and instead use environment variables or secret management tools, which aligns with industry security best practices.
[INDIRECT_PROMPT_INJECTION]: The skill provides instructions for building bots that ingest and process external user messages from Telegram.
Ingestion points: Bot handlers (e.g., bot.on("message:text") in the provided examples) ingest text updates directly from the Telegram API.
Boundary markers: The skill emphasizes using HTML or Markdown markers for formatting but does not explicitly define delimiters for LLM-specific context boundaries.
Capability inventory: The resulting bots are capable of sending messages, handling payments, and interacting with Mini Apps via the Telegram Bot API.
Sanitization: The skill provides a concrete implementation of an escapeHtml function to sanitize user input and prevent parsing errors in formatted messages.

telegram-bot-builder