using-telegram-bot
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a technical guide providing code examples for the well-known Telegraf library. All code snippets perform expected bot functionalities such as handling commands, responding to text, and setting up webhooks.- [EXTERNAL_DOWNLOADS]: The skill references the installation of 'telegraf' and 'express' via the standard npm registry. These are well-known, widely used packages for Node.js development.- [CREDENTIALS_UNSAFE]: No hardcoded credentials were detected. The examples correctly demonstrate the use of environment variables (process.env.BOT_TOKEN) for managing API keys, which is a recommended security practice.- [COMMAND_EXECUTION]: The skill includes basic bash commands for installing dependencies and running the script (node bot.js), which are standard for the described development task.- [DATA_EXFILTRATION]: No unauthorized data exfiltration patterns were found. Network operations are limited to the official Telegram Bot API via the Telegraf library and standard media URLs.- [PROMPT_INJECTION]: No attempts to override system instructions or bypass safety filters were detected in the skill content or metadata.
Audit Metadata