Telegram .md File Uploader

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:22 PM UTC
• Version:
  1.0.1

Overview

This is a disclosed Telegram uploader for user-selected Markdown files, with sensitive external sharing behavior that matches its stated purpose.

Install only if you intentionally want to send selected Markdown files to a Telegram chat. Use a dedicated bot token, verify the chat ID, keep the token private, and review files for secrets or private content before uploading.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 94% confidence
• Finding: The skill instructs use of environment variables for a Telegram bot token and chat ID and performs outbound network transmission, but it does not declare corresponding permissions. That creates a transparency and governance gap: users or enforcement systems may not realize the skill can access secrets and exfiltrate workspace files to an external service, which is especially sensitive because the stated purpose is uploading local markdown files off-platform.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The script uploads a local file to Telegram, which is an external third-party service, but it provides no explicit runtime confirmation or warning before transmitting workspace data. In an agent-skill context, this is risky because users may invoke the skill on sensitive workspace files and the transfer happens immediately once called.

External Transmission

Medium

• Category: Data Exfiltration

Content

print(f"Error: {file_path} is not a valid Markdown (.md) file.")
sys.exit(1)

url = f"https://api.telegram.org/bot{token}/sendDocument"

try:
with open(file_path, 'rb') as f:

• Confidence: 96% confidence
• Finding: https://api.telegram.org/

VirusTotal

66/66 vendors flagged this skill as clean.