The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the @will-17173/telegram-cli package from the npm registry.
[COMMAND_EXECUTION]: The skill's primary function is to execute shell commands using the tg binary or pnpm dev for Telegram account management, message synchronization, and chat administration.
[DATA_EXPOSURE & EXFILTRATION]: The instructions involve handling sensitive Telegram authentication data, including API hashes and session files. The skill correctly identifies these as secrets and explicitly forbids printing them to logs or committing them to version control.
[PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it ingests untrusted data from Telegram messages via commands like tg sync and tg search.
Ingestion points: Telegram message content is retrieved and stored in a local SQLite database using history, sync, and refresh commands (found in SKILL.md and references/command-reference.md).
Boundary markers: The skill includes a mandatory rule requiring explicit user authorization before performing any state-changing operations like send, edit, or delete (SKILL.md).
Capability inventory: The tool allows the agent to send/edit/delete messages and perform group mutations (references/command-reference.md).
Sanitization: Human-in-the-loop authorization is the mandated control for all mutation actions to mitigate risks from untrusted message content.

using-telegram-cli