telegram-automation

Warn

Audited by Socket on Apr 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: the skill's capabilities match Telegram automation, but it routes credentials and message traffic through the third-party Rube/Composio MCP layer instead of direct Telegram APIs, and it grants the agent real-world messaging powers. The footprint is coherent with the stated purpose, but the intermediary data flow and autonomous communication capabilities make it high risk rather than benign.

Confidence: 86%Severity: 72%
Audit Metadata
Analyzed At
Apr 14, 2026, 06:27 PM
Package URL
pkg:socket/skills-sh/sickn33%2Fantigravity-awesome-skills%2Ftelegram-automation%2F@b7d53d252518e4acecd1752963fb627109dd2070