TG Image Sender

Security checks across malware telemetry and agentic risk

Overview

This instruction-only skill is narrowly focused on sending user-requested images to Telegram, with no code, install step, persistence, or credential handling shown.

This skill appears safe for its narrow purpose. Before installing, understand that it lets the agent send images directly to Telegram when requested; avoid using it for private or sensitive media unless you have checked the destination chat and content.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

If invoked, the agent can send an image URL or provided media into Telegram rather than only drafting a response.

Why it was flagged

The skill instructs the agent to use a messaging tool to send media to Telegram. This is expected for the stated purpose, but it is still an action that posts content to a chat.

Skill content
Call the `message` tool directly:

```
message action=send channel=telegram media="https://picsum.photos/800/600?random=1" caption="Test image 🦞"
```
Recommendation

Use it when you want direct Telegram image sending, and confirm the image, caption, and intended chat before sending sensitive or public-facing media.

#
ASI03: Identity and Privilege Abuse
Low
What this means

The skill may use your agent's existing Telegram send capability to post media in a chat.

Why it was flagged

Sending to Telegram chats implies use of whatever delegated Telegram messaging permission the host agent already has. The artifact does not request separate credentials and the behavior is aligned with the skill description.

Skill content
Send test or generated images directly to Telegram chats using the message tool
Recommendation

Install only if you are comfortable allowing user-requested image sends through the existing Telegram message tool.