search-messages

SUSPICIOUS: the stated purpose matches Telegram message search, and there is no clear evidence of credential exfiltration or unrelated capabilities. However, the skill's core functionality depends on an unverifiable local `tg-cli.py` that uses a sensitive Telethon session file, so install/execution trust is insufficiently established and drives a high security-risk classification.