telegram-bot-agent

SUSPICIOUS. The overall purpose is coherent for a Telegram automation skill and the documented installs use legitimate PyPI packages, so this is not confirmed malware. Risk is still medium because the skill enables autonomous outbound messaging to real contacts/groups, stores a bot token and chat mappings locally, and relies on unreviewed local scripts that will receive those secrets and perform the network actions.