send-media
Warn
Audited by Socket on Oct 22, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the core capability—uploading local files to Telegram from a personal account—matches the stated purpose, and no malicious credential harvesting or hidden exfiltration endpoint is evident. However, it performs autonomous outbound messaging/file transfer, can expose arbitrary local files if misused, and includes a self-modifying instruction plus an only-partially-verifiable local helper chain, so it should not be classified benign.
Confidence: 87%Severity: 58%
Audit Metadata