telegram
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: All external communication is directed to the official Telegram Bot API at api.telegram.org, which is a well-known and trusted service. This activity is consistent with the skill's stated purpose of managing Telegram bots.- [SAFE]: The skill implements secure credential management by retrieving the bot token from a local configuration endpoint (localhost:23001) at runtime, preventing the exposure of sensitive API keys in the source code.- [SAFE]: While the skill provides capabilities to read chat history and search group messages (via 'alma group history' and 'alma group search'), these are standard features for a messaging tool and do not exhibit malicious patterns or unauthorized data collection.
Audit Metadata