Telegram Phone Checker
PassAudited by ClawScan on May 1, 2026.
Overview
This instruction-only skill is coherent and disclosed, but it uses an apipick API key and sends phone numbers to a third-party API to retrieve Telegram profile status.
Before installing, understand that this skill will use your apipick API key and send queried phone numbers to apipick. Use it only for numbers you have permission to check, protect your API key, and consider privacy or legal obligations around looking up Telegram account information.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The user's apipick account key and credits may be used whenever the skill performs a lookup.
The skill requires a user-owned API credential and may consume paid or limited account credits, but this credential use is disclosed and purpose-aligned.
Use `$APIPICK_API_KEY` env var as the `x-api-key` header value; if not set, ask the user for their apipick API key
Use a dedicated apipick key if possible, keep it secret, and monitor credit usage.
Phone numbers you check are shared with apipick, and returned Telegram details may relate to another person's account.
The skill sends the queried phone number to an external provider and returns Telegram registration/profile fields; this is central to the skill, but it is a sensitive data boundary.
POST https://www.apipick.com/api/check-phone-telegram ... {"phone_number": "+1234567890"}Only check numbers you are authorized to query, and review apipick's privacy and retention practices before use.