telegram-automation
Warn
Audited by Socket on Apr 14, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: the skill's capabilities match Telegram automation, but it routes credentials and message traffic through the third-party Rube/Composio MCP layer instead of direct Telegram APIs, and it grants the agent real-world messaging powers. The footprint is coherent with the stated purpose, but the intermediary data flow and autonomous communication capabilities make it high risk rather than benign.
Confidence: 86%Severity: 72%
Audit Metadata