telegram-webapps

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the official Telegram Web App SDK from Telegram's CDN and the cloudflared utility from Cloudflare's public GitHub releases for local development tunneling.
  • [COMMAND_EXECUTION]: Includes shell scripts and instructions for local environment setup, using commands such as curl, chmod, and sudo to facilitate binary installation and endpoint connectivity testing.
  • [SAFE]: Provides comprehensive guidance on implementing critical security controls, including cryptographically sound backend validation of Telegram authentication data (HMAC-SHA256 and Ed25519), protection against replay attacks using nonces, and secure CORS/CSP configurations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 03:34 AM
Security Audit — agent-trust-hub — telegram-webapps