telegram-mini-app
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official Telegram Web App API script from telegram.org and provides instructions for installing the @tonconnect/ui-react package via NPM. Both are well-known and standard resources for the intended development tasks.- [COMMAND_EXECUTION]: Includes standard shell commands for Node.js package management and environment configuration, which are routine in modern web development.- [INDIRECT_PROMPT_INJECTION]: The skill documents the attack surface involving untrusted user data provided by the Telegram environment (initData). It provides a secure implementation guide for server-side validation using HMAC-SHA256, ensuring that user identities and data are verified before use.
Audit Metadata