Telegram MTPROTO CLI

• Outcome: Pass
• Latest audit: May 28, 2026, 6:47 AM
• Version:
  0.1.4

Overview

This skill appears to be a disclosed, read-only Telegram CLI integration, with sensitive credential and session handling that users should protect carefully.

Install only if you are comfortable giving this CLI access to your Telegram account, local Telegram session database, and system keychain entries. Keep the session directory private, do not share session files, and use it only on a machine where you trust the local agent/runtime with Telegram message access.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Rogue Agent: Self-Modification, Session Persistence
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Credential Access

High

• Category: Privilege Escalation

Content

filesystem:
    - read/write: ~/.tg-mtproto-cli/sessions/*.session (SQLite auth sessions)
    - write: media files to --out dir or cwd (tg download only)
  keychain: read/write account metadata and API credentials
  shell: false
  browser: false
---

• Confidence: 72% confidence
• Finding: keychain

Credential Access

High

• Category: Privilege Escalation

Content

|---|---|---|
| Network | Outbound TCP to Telegram DC servers | MTProto protocol, required for all commands |
| Session files | Read/write `~/.tg-mtproto-cli/sessions/*.session` | SQLite databases with auth keys; created by `tg auth` |
| System keychain | Read/write | Stores `api_id`, `api_hash`, account metadata, default account |
| Filesystem | Write (only `tg download`) | Saves media to `--out` dir or current directory |

## Guardrails

• Confidence: 74% confidence
• Finding: keychain

Session Persistence

Medium

• Category: Rogue Agent

Content

| Resource | Access | Details |
|---|---|---|
| Network | Outbound TCP to Telegram DC servers | MTProto protocol, required for all commands |
| Session files | Read/write `~/.tg-mtproto-cli/sessions/*.session` | SQLite databases with auth keys; created by `tg auth` |
| System keychain | Read/write | Stores `api_id`, `api_hash`, account metadata, default account |
| Filesystem | Write (only `tg download`) | Saves media to `--out` dir or current directory |

• Confidence: 80% confidence
• Finding: write `~/.tg-mtproto-cli

VirusTotal

64/64 vendors flagged this skill as clean.