telegram-bot-builder
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill promotes secure development practices by explicitly instructing the user to store bot tokens in environment variables and provides a .env file structure for this purpose.
- [EXTERNAL_DOWNLOADS]: The skill references standard, reputable packages (grammY, Telegraf, python-telegram-bot, dotenv, better-sqlite3) to be installed via official package managers (npm, pip).
- [DATA_EXFILTRATION]: All network-related instructions, such as setting webhooks or downloading files, are directed toward the legitimate Telegram Bot API domain (api.telegram.org).
Audit Metadata