telegram-webapps
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the official Telegram Web App SDK from Telegram's CDN and the cloudflared utility from Cloudflare's public GitHub releases for local development tunneling.
- [COMMAND_EXECUTION]: Includes shell scripts and instructions for local environment setup, using commands such as
curl,chmod, andsudoto facilitate binary installation and endpoint connectivity testing. - [SAFE]: Provides comprehensive guidance on implementing critical security controls, including cryptographically sound backend validation of Telegram authentication data (HMAC-SHA256 and Ed25519), protection against replay attacks using nonces, and secure CORS/CSP configurations.
Audit Metadata