cleanup-deleted
Warn
Audited by Socket on Apr 4, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The stated purpose matches Telegram cleanup, and no obvious credential theft or off-platform exfiltration is visible. However, the skill executes an unseen local script with authority to perform destructive Telegram account actions, and uv may introduce runtime supply-chain fetches. Risk is moderate from unverifiable execution scope and autonomous account modification, not confirmed malware.
Confidence: 80%Severity: 58%
Audit Metadata