Telegram File Sender

• Outcome: Pass
• Latest audit: May 28, 2026, 3:46 AM
• Version:
  1.0.3

Overview

This skill openly prepares user-selected local files for sending to Telegram, but users should confirm the exact file and chat before use because it can transfer any readable file path.

Install only if you want an agent to send local files to Telegram. Before each send, verify the exact source path, destination chat ID, and bot accountId, and avoid using it for secrets, credentials, private system files, or files you have not explicitly chosen to share.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Vague Triggers

Medium

• Confidence: 90% confidence
• Finding: The trigger list is very broad, including common phrases like "send me" and similar Chinese variants, which can cause the skill to activate in ordinary conversation without a clear, explicit request to transfer a file. In a skill that sends arbitrary local files to an external Telegram recipient, accidental activation materially increases the risk of unintended data exfiltration from the agent filesystem.

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The usage guidance says to use the skill whenever a user wants a file, note, or document forwarded to Telegram, but it does not define strict boundaries around authorization, file sensitivity, or when the agent must refuse. Because the skill is specifically designed to move local files off-system, ambiguous activation conditions make it easier for a user prompt or contextual misunderstanding to trigger transmission of sensitive local content.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill advertises sending local filesystem content, including iCloud Drive files, to Telegram, but does not require a user-facing privacy warning or explicit informed consent at the point of transfer. This is dangerous because it normalizes exfiltration of local data to a third-party messaging platform and may cause users or agents to overlook confidentiality, recipient mistakes, and data handling implications.

VirusTotal

VirusTotal findings are pending for this skill version.